# Top

**URL:** https://discuss.elastic.co/top.md?page=872&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 873

---

## [Send same document to multiple elasticsearch indexes](https://discuss.elastic.co/t/send-same-document-to-multiple-elasticsearch-indexes/171702)

<div class="topic-metadata">

**Author:** [@Praneet\_Khandelwal](https://discuss.elastic.co/u/Praneet_Khandelwal)\
**Replies:** 4\
**Last updated:** [March 12, 2019, 12:50pm UTC](https://discuss.elastic.co/t/send-same-document-to-multiple-elasticsearch-indexes/171702 "2019-03-12T12:50:32Z")

</div>

I am processing incoming documents via logstash. And I would like to send the documents to different multiple indices. I have found this approach to solve the problem. output { elasticsearch { host =\> "…

---

## [Log Filtering in ELK Stack](https://discuss.elastic.co/t/log-filtering-in-elk-stack/133588)

<div class="topic-metadata">

**Author:** [@abhat](https://discuss.elastic.co/u/abhat)\
**Replies:** 4\
**Last updated:** [May 28, 2018, 11:01pm UTC](https://discuss.elastic.co/t/log-filtering-in-elk-stack/133588 "2018-05-28T23:01:40Z")

</div>

Hi Team, I am new to ELK stack and I just setup an ELK stack which collects logs from tomcat log directory. My requirement is it should only capture SEVERE AND ERROR messages in the log files present in the log directo…

---

## [This is the error im getting with $ sudo apt-get update](https://discuss.elastic.co/t/this-is-the-error-im-getting-with-sudo-apt-get-update/80634)

<div class="topic-metadata">

**Author:** [@Jonesthomas](https://discuss.elastic.co/u/Jonesthomas)\
**Replies:** 4\
**Last updated:** [March 31, 2017, 12:16pm UTC](https://discuss.elastic.co/t/this-is-the-error-im-getting-with-sudo-apt-get-update/80634 "2017-03-31T12:16:29Z")

</div>

W: Duplicate sources.list entry http://packages.elastic.co/logstash/2.2/debian/ stable/main i386 Packages (/var/lib/apt/lists/packages.elastic.co\_logstash\_2.2\_debian\_dists\_stable\_main\_binary-i386\_Packages) W: Duplicate s…

---

## [How Refresh works between primary and replica shards](https://discuss.elastic.co/t/how-refresh-works-between-primary-and-replica-shards/219181)

<div class="topic-metadata">

**Author:** [@Konathala\_Naveen](https://discuss.elastic.co/u/Konathala_Naveen)\
**Replies:** 5\
**Last updated:** [February 17, 2020, 2:01pm UTC](https://discuss.elastic.co/t/how-refresh-works-between-primary-and-replica-shards/219181 "2020-02-17T14:01:16Z")

</div>

How the refresh works between primary and replica shards 1.When the refresh happen on index.Does primary and replica shards refresh will happen in synchronous way? or After this indexing can happen asynchronously.

---

## [Sql\_last\_value, store value even no document indexed](https://discuss.elastic.co/t/sql-last-value-store-value-even-no-document-indexed/213695)

<div class="topic-metadata">

**Author:** [@pilo](https://discuss.elastic.co/u/pilo)\
**Replies:** 5\
**Last updated:** [January 7, 2020, 4:34pm UTC](https://discuss.elastic.co/t/sql-last-value-store-value-even-no-document-indexed/213695 "2020-01-07T16:34:36Z")

</div>

Hello everyone, I'm using logstash jdbc to transform my data in postgresql to Elasticsearch. Because my sql query is too large, about 1 millions records, i have to use schedule to transform about 5 row each time, and i…

---

## [Use dates in the Y-axis](https://discuss.elastic.co/t/use-dates-in-the-y-axis/102733)

<div class="topic-metadata">

**Author:** [@Charlotte31](https://discuss.elastic.co/u/Charlotte31)\
**Replies:** 5\
**Last updated:** [October 11, 2017, 9:08am UTC](https://discuss.elastic.co/t/use-dates-in-the-y-axis/102733 "2017-10-11T09:08:59Z")

</div>

Hello all, I hope that I don't make a mistake and that the topic is not opened somewhere. I want to use dates in Y-axis, and add the start time (in HH:mm:ss format) and the end time (same format) to show the tendency o…

---

## [Specify timeout per watch](https://discuss.elastic.co/t/specify-timeout-per-watch/92164)

<div class="topic-metadata">

**Author:** [@nielsoncr](https://discuss.elastic.co/u/nielsoncr)\
**Replies:** 5\
**Last updated:** [July 7, 2017, 9:25pm UTC](https://discuss.elastic.co/t/specify-timeout-per-watch/92164 "2017-07-07T21:25:09Z")

</div>

I have a watch that runs infrequently and is schedule during low cluster activity. Even running during low activity the watch query sometimes requires more than the default timeout of 30s to execute. I don't want to ch…

---

## [How to retrieve the documents(records) of a saved search in elastic search](https://discuss.elastic.co/t/how-to-retrieve-the-documents-records-of-a-saved-search-in-elastic-search/119812)

<div class="topic-metadata">

**Author:** [@Sachidananda\_VS](https://discuss.elastic.co/u/Sachidananda_VS)\
**Replies:** 1\
**Last updated:** [February 16, 2018, 9:43am UTC](https://discuss.elastic.co/t/how-to-retrieve-the-documents-records-of-a-saved-search-in-elastic-search/119812 "2018-02-16T09:43:25Z")

</div>

Hi All, I started exploring the ELK stack and was very happy to learn and implement the ELK features for my requirements. Currently I need a help in retrieving the documents (records) of a saved search. I am pushing my…

---

## [Conditional Filebeat output based on document type](https://discuss.elastic.co/t/conditional-filebeat-output-based-on-document-type/117233)

<div class="topic-metadata">

**Author:** [@tsullivan93](https://discuss.elastic.co/u/tsullivan93)\
**Replies:** 1\
**Last updated:** [January 29, 2018, 11:25am UTC](https://discuss.elastic.co/t/conditional-filebeat-output-based-on-document-type/117233 "2018-01-29T11:25:03Z")

</div>

Currently I have filebeat on a server with multiple different application logs, so I have multiple prospectors grabbing and tagging the different application logs. The logs have different formats so one of them needs to…

---

## [Can watcher run a local script as an Action?](https://discuss.elastic.co/t/can-watcher-run-a-local-script-as-an-action/38239)

<div class="topic-metadata">

**Author:** [@sthurlow](https://discuss.elastic.co/u/sthurlow)\
**Replies:** 1\
**Last updated:** [January 4, 2016, 8:33am UTC](https://discuss.elastic.co/t/can-watcher-run-a-local-script-as-an-action/38239 "2016-01-04T08:33:59Z")

</div>

I have salt running on the same host as Watcher. I have setup a watch for a specific log entry, and am currently emailing when they occur. I want to run a salt command when this log entry appears, which will interact wit…

---

## [ELK architecture advice with S3](https://discuss.elastic.co/t/elk-architecture-advice-with-s3/69236)

<div class="topic-metadata">

**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\
**Replies:** 2\
**Last updated:** [December 19, 2016, 11:41am UTC](https://discuss.elastic.co/t/elk-architecture-advice-with-s3/69236 "2016-12-19T11:41:19Z")

</div>

I am new to using ELK and I am planning to stream logs from multiple application servers into S3 and then make logstash read from there. So, I need some advise on how that architecture could look like. I have gone throug…

---

## [Unable to install logtrail plugin](https://discuss.elastic.co/t/unable-to-install-logtrail-plugin/259630)

<div class="topic-metadata">

**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\
**Replies:** 6\
**Last updated:** [December 29, 2020, 6:13am UTC](https://discuss.elastic.co/t/unable-to-install-logtrail-plugin/259630 "2020-12-29T06:13:37Z")

</div>

Hello Team, We just upgrade our ELK stack version from 6.8 to 7.10.1. We are using 3 node elasticsaerch cluster and cluster is up and running. We upgraded our kibana also from 6.8 to 7.10.1 and its also running we are a…

---

## [Compiling are Kibana project quickly, is it possible?](https://discuss.elastic.co/t/compiling-are-kibana-project-quickly-is-it-possible/80484)

<div class="topic-metadata">

**Author:** [@Gynidark](https://discuss.elastic.co/u/Gynidark)\
**Replies:** 6\
**Last updated:** [March 29, 2017, 1:33pm UTC](https://discuss.elastic.co/t/compiling-are-kibana-project-quickly-is-it-possible/80484 "2017-03-29T13:33:14Z")

</div>

Hello, How can I compile my project without wasting time deleting the file optimize / bundles and reorder: bin / kibana.bat? The compilation is very long and it irritates me... :smiley: Regards, gynidark.github.io

---

## [HowTo reconfigure an ElasticAgent with an invalid Fleet-URL](https://discuss.elastic.co/t/howto-reconfigure-an-elasticagent-with-an-invalid-fleet-url/350600)

<div class="topic-metadata">

**Author:** [@m3sos](https://discuss.elastic.co/u/m3sos)\
**Replies:** 4\
**Last updated:** [January 15, 2024, 7:23am UTC](https://discuss.elastic.co/t/howto-reconfigure-an-elasticagent-with-an-invalid-fleet-url/350600 "2024-01-15T07:23:03Z")

</div>

My elastic agents are running in a kubernetes cluster (daemon set). For debugging purposes I configured a fleet server url pointing to a wiremock instance (pod only) running temporarily in the cluster too. After debuggi…

---

## [Error when running Filebeat in docker: /usr/local/bin/docker-entrypoint: line 8: exec: filebeat: not found](https://discuss.elastic.co/t/error-when-running-filebeat-in-docker-usr-local-bin-docker-entrypoint-line-8-exec-filebeat-not-found/233645)

<div class="topic-metadata">

**Author:** [@david4](https://discuss.elastic.co/u/david4)\
**Replies:** 4\
**Last updated:** [May 25, 2020, 12:55pm UTC](https://discuss.elastic.co/t/error-when-running-filebeat-in-docker-usr-local-bin-docker-entrypoint-line-8-exec-filebeat-not-found/233645 "2020-05-25T12:55:30Z")

</div>

I kept getting this error /usr/local/bin/docker-entrypoint: line 8: exec: filebeat: not found when running export HOST\_UID=1001; export HOST\_GID=1001; docker-compose up Here is my docker-compose.yml file: version: '3.…

---

## [Sorry, this confirmation link is no longer valid](https://discuss.elastic.co/t/sorry-this-confirmation-link-is-no-longer-valid/210933)

<div class="topic-metadata">

**Author:** [@spottedmahn](https://discuss.elastic.co/u/spottedmahn)\
**Replies:** 4\
**Last updated:** [December 9, 2019, 4:18pm UTC](https://discuss.elastic.co/t/sorry-this-confirmation-link-is-no-longer-valid/210933 "2019-12-09T16:18:12Z")

</div>

I just tried to change my email address on my account page, https://discuss.elastic.co/u/spottedmahn/preferences/account, but when I click on the email link I get: Sorry, this confirmation link is no longer valid. P…

---

## [Elasticsearch NEST client \[search\] requests with source filtering are not working as expected](https://discuss.elastic.co/t/elasticsearch-nest-client-search-requests-with-source-filtering-are-not-working-as-expected/118412)

<div class="topic-metadata">

**Author:** [@manwa](https://discuss.elastic.co/u/manwa)\
**Replies:** 4\
**Last updated:** [February 5, 2018, 12:27pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-client-search-requests-with-source-filtering-are-not-working-as-expected/118412 "2018-02-05T12:27:55Z")

</div>

Hello , I'm currently using elasticsearch NEST client v 6.0.0 with ES v6.1.2. When i use NEST search request with source filtering to include the specified fields only in the returned documents, the source for each doc…

---

## [Script update : NOOP when script does not modify document?](https://discuss.elastic.co/t/script-update-noop-when-script-does-not-modify-document/222724)

<div class="topic-metadata">

**Author:** [@deslauriersp](https://discuss.elastic.co/u/deslauriersp)\
**Replies:** 1\
**Last updated:** [March 12, 2020, 9:59am UTC](https://discuss.elastic.co/t/script-update-noop-when-script-does-not-modify-document/222724 "2020-03-12T09:59:14Z")

</div>

I need to update a large number of documents. Technically this update (should) generate a lot of noops. The script checks a condition on the \_source, and only modify the \_source under certain conditions. I cannot check …

---

## [Elasticsearch index policy creation best practice/performance](https://discuss.elastic.co/t/elasticsearch-index-policy-creation-best-practice-performance/220499)

<div class="topic-metadata">

**Author:** [@Yoandy\_Perez\_Villazo](https://discuss.elastic.co/u/Yoandy_Perez_Villazo)\
**Replies:** 1\
**Last updated:** [February 22, 2020, 4:01pm UTC](https://discuss.elastic.co/t/elasticsearch-index-policy-creation-best-practice-performance/220499 "2020-02-22T16:01:41Z")

</div>

He folks, I am designing a search system based on ElasticSearch, after reading a lot I have seen that some systems such as logs use a policy of multiple indexes to save the same content, similar to mylogs-12-02-2020 and…

---

## [Has\`default\_operator\` of QueryString changed algorithm with \`multi field\` from ES2.3 to ES6.1?](https://discuss.elastic.co/t/has-default-operator-of-querystring-changed-algorithm-with-multi-field-from-es2-3-to-es6-1/113564)

<div class="topic-metadata">

**Author:** [@aiflu](https://discuss.elastic.co/u/aiflu)\
**Replies:** 7\
**Last updated:** [January 6, 2018, 6:13pm UTC](https://discuss.elastic.co/t/has-default-operator-of-querystring-changed-algorithm-with-multi-field-from-es2-3-to-es6-1/113564 "2018-01-06T18:13:37Z")

</div>

Hello, I'm updating my project from ES 2.3 to ES 6.1. I feel confused about the algorithm of QueryString with default\_operator and fields. My purpose is to search in the fields city.name and zipcode.raw with one query l…

---

## [How do we create a trend line on Kibana?](https://discuss.elastic.co/t/how-do-we-create-a-trend-line-on-kibana/298624)

<div class="topic-metadata">

**Author:** [@Priyanka\_Rajpal](https://discuss.elastic.co/u/Priyanka_Rajpal)\
**Replies:** 3\
**Last updated:** [March 2, 2022, 3:13pm UTC](https://discuss.elastic.co/t/how-do-we-create-a-trend-line-on-kibana/298624 "2022-03-02T15:13:17Z")

</div>

How do I create a trend line for a bar graph, where on X axis I have date histogram and on Y axis sum/count? (Not referring to line graph when saying trend line) Thanks

---

## [Not able to connect to ElasticSearch Cluster in AWS from Kibana](https://discuss.elastic.co/t/not-able-to-connect-to-elasticsearch-cluster-in-aws-from-kibana/218071)

<div class="topic-metadata">

**Author:** [@chilakala](https://discuss.elastic.co/u/chilakala)\
**Replies:** 3\
**Last updated:** [February 10, 2020, 8:05pm UTC](https://discuss.elastic.co/t/not-able-to-connect-to-elasticsearch-cluster-in-aws-from-kibana/218071 "2020-02-10T20:05:49Z")

</div>

Hi All, I have setup a Elastic search cluster in AWS using the ec2 discovery plugin. I have 2 Nodes, one as master and another as data node. They are able to discover automatically and i see the 2 Nodes on the master …

---

## [Use time filter and field filter in watcher](https://discuss.elastic.co/t/use-time-filter-and-field-filter-in-watcher/207704)

<div class="topic-metadata">

**Author:** [@rvenne](https://discuss.elastic.co/u/rvenne)\
**Replies:** 3\
**Last updated:** [November 28, 2019, 12:52pm UTC](https://discuss.elastic.co/t/use-time-filter-and-field-filter-in-watcher/207704 "2019-11-28T12:52:12Z")

</div>

I want to run a watcher that checks if an error with a specific message is occuring within a specific time range. This is the current custom watch JSON that I made: { "trigger": { "schedule": { "interval": "1m" } …

---

## [Initial using AppSearch](https://discuss.elastic.co/t/initial-using-appsearch/186282)

<div class="topic-metadata">

**Author:** [@tales](https://discuss.elastic.co/u/tales)\
**Replies:** 8\
**Last updated:** [June 28, 2019, 1:12pm UTC](https://discuss.elastic.co/t/initial-using-appsearch/186282 "2019-06-28T13:12:41Z")

</div>

I've started with AppSearch by Swiftype.com to tests, but i have some doubts. How many documents can i ingest with trial version? I trying to ingest around +- 5,000 documents, but i can't make it. There're no errors. …

---

## [\_split\_type\_failure](https://discuss.elastic.co/t/split-type-failure/256959)

<div class="topic-metadata">

**Author:** [@salma\_widiarti](https://discuss.elastic.co/u/salma_widiarti)\
**Replies:** 6\
**Last updated:** [December 1, 2020, 4:03am UTC](https://discuss.elastic.co/t/split-type-failure/256959 "2020-12-01T04:03:44Z")

</div>

Hi all, i have config logstash like this input { http\_poller { urls =\> { users =\> { method =\> GET user =\> "user@gmail.com" password =\> "password" …

---

## [Use case Kibana Alerts vs Watcher](https://discuss.elastic.co/t/use-case-kibana-alerts-vs-watcher/313844)

<div class="topic-metadata">

**Author:** [@vwong](https://discuss.elastic.co/u/vwong)\
**Replies:** 1\
**Last updated:** [September 7, 2022, 12:29pm UTC](https://discuss.elastic.co/t/use-case-kibana-alerts-vs-watcher/313844 "2022-09-07T12:29:06Z")

</div>

Hi, As I read from document, Kibana Alerts and watcher are both used to detect conditions and can trigger actions in response. As they offer similar function, would there use cases that can share for using either one o…

---

## [Kibana shows sometimes 503 license not available (due to timeout after 30000ms)](https://discuss.elastic.co/t/kibana-shows-sometimes-503-license-not-available-due-to-timeout-after-30000ms/274726)

<div class="topic-metadata">

**Author:** [@Anatolij](https://discuss.elastic.co/u/Anatolij)\
**Replies:** 1\
**Last updated:** [June 16, 2021, 5:24am UTC](https://discuss.elastic.co/t/kibana-shows-sometimes-503-license-not-available-due-to-timeout-after-30000ms/274726 "2021-06-16T05:24:06Z")

</div>

Hello, I already saw a few errors about 503 license not available. But none of these matched my error. I only see the 503 license not available randomly on a few requests. Sometimes i have to wait the 30000ms loading t…

---

## [Elastic-APM Invalid index name \[\_license\]](https://discuss.elastic.co/t/elastic-apm-invalid-index-name-license/274131)

<div class="topic-metadata">

**Author:** [@pszm](https://discuss.elastic.co/u/pszm)\
**Replies:** 1\
**Last updated:** [May 27, 2021, 5:01am UTC](https://discuss.elastic.co/t/elastic-apm-invalid-index-name-license/274131 "2021-05-27T05:01:24Z")

</div>

We are trying to get elastic-apm install (for now on our development systems). According to Homebrew, we have the latest elasticsearch-oss (7.10.2), kibana-oss (7.10.2) and today installed apm-server-oss (which is at ve…

---

## [Too many open files. Logstash 6.1](https://discuss.elastic.co/t/too-many-open-files-logstash-6-1/113334)

<div class="topic-metadata">

**Author:** [@kezz](https://discuss.elastic.co/u/kezz)\
**Replies:** 1\
**Last updated:** [December 28, 2017, 10:00am UTC](https://discuss.elastic.co/t/too-many-open-files-logstash-6-1/113334 "2017-12-28T10:00:54Z")

</div>

Hey, folks! Please help me solve this problem. Logstash 6.1 Have this in logs: ...... \[2017-12-25T21:23:21,010\]\[WARN \]\[io.netty.channel.DefaultChannelPipeline\] An exceptionCaught() event was fired, and it reached …

---

## [How do i change the results view in search ui](https://discuss.elastic.co/t/how-do-i-change-the-results-view-in-search-ui/241342)

<div class="topic-metadata">

**Author:** [@phani2](https://discuss.elastic.co/u/phani2)\
**Replies:** 2\
**Last updated:** [July 21, 2020, 7:35pm UTC](https://discuss.elastic.co/t/how-do-i-change-the-results-view-in-search-ui/241342 "2020-07-21T19:35:29Z")

</div>

By default, in search UI the results are viewed in the Json format. But if I would like to change that and am try to view the results in tabular format how can it be done?

---

## [Logstash not handling Byte Order Mark (BOM) correctly](https://discuss.elastic.co/t/logstash-not-handling-byte-order-mark-bom-correctly/141804)

<div class="topic-metadata">

**Author:** [@smbullet](https://discuss.elastic.co/u/smbullet)\
**Replies:** 2\
**Last updated:** [July 26, 2018, 7:46pm UTC](https://discuss.elastic.co/t/logstash-not-handling-byte-order-mark-bom-correctly/141804 "2018-07-26T19:46:50Z")

</div>

See reply for update. I have an rsyslog config that looks like this: $ModLoad imtcp $ModLoad imudp $template myFormat,"\<%pri%\> %timestamp% \<%syslogfacility%.%syslogpriority%\> %hostname% %syslogtag%: %msg%\\n" $ActionFi…

---

## [Filebeat doesn't work with AWS ES domain](https://discuss.elastic.co/t/filebeat-doesnt-work-with-aws-es-domain/255683)

<div class="topic-metadata">

**Author:** [@hairongGao](https://discuss.elastic.co/u/hairongGao)\
**Replies:** 3\
**Last updated:** [November 17, 2020, 8:12pm UTC](https://discuss.elastic.co/t/filebeat-doesnt-work-with-aws-es-domain/255683 "2020-11-17T20:12:09Z")

</div>

Hi Team, I've been trying to make filebeat working with AWS ES domain , but I keep getting this error: 2020-11-17T11:42:25.740Z ERROR \[publisher\_pipeline\_output\] pipeline/output.go:154 Failed to connect to backoff(ela…

---

## [Exclude some words with query in timelion](https://discuss.elastic.co/t/exclude-some-words-with-query-in-timelion/148725)

<div class="topic-metadata">

**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\
**Replies:** 3\
**Last updated:** [September 19, 2018, 9:07pm UTC](https://discuss.elastic.co/t/exclude-some-words-with-query-in-timelion/148725 "2018-09-19T21:07:44Z")

</div>

How can I exclude some docs in timelion syntax? I want 3 first managers but not John Doe (even if he is in top 3) .es(index=some\_index\*, timefield=order\_date, split=account\_manager.keyword:3, q="NOT account\_manager.key…

---

## [Ingesting from Hive to ElasticSearch](https://discuss.elastic.co/t/ingesting-from-hive-to-elasticsearch/79747)

<div class="topic-metadata">

**Author:** [@vsdeepthi](https://discuss.elastic.co/u/vsdeepthi)\
**Replies:** 3\
**Last updated:** [March 27, 2017, 3:55pm UTC](https://discuss.elastic.co/t/ingesting-from-hive-to-elasticsearch/79747 "2017-03-27T15:55:14Z")

</div>

Hi, I am using a scala program to load an index in Hive to Elastic search. I run this job as a spark-submit command with options --driver-memory 12000m --driver-cores 15 --num-executors 20. There are 60000000 records …

---

## [Shield not respecting CONF\_DIR](https://discuss.elastic.co/t/shield-not-respecting-conf-dir/46014)

<div class="topic-metadata">

**Author:** [@Jakauppila](https://discuss.elastic.co/u/Jakauppila)\
**Replies:** 3\
**Last updated:** [July 14, 2016, 6:06am UTC](https://discuss.elastic.co/t/shield-not-respecting-conf-dir/46014 "2016-07-14T06:06:45Z")

</div>

So I'm running Elasticsearch on Windows and I am separating the Elasticsearch node configuration from Elasticsearch itself with the following structure: D:\\elasticsearch\\elasticsearch-2.3.0\\ This is where Elasticsear…

---

## [Get unique count of most recent event](https://discuss.elastic.co/t/get-unique-count-of-most-recent-event/117712)

<div class="topic-metadata">

**Author:** [@Ted\_Jenkins](https://discuss.elastic.co/u/Ted_Jenkins)\
**Replies:** 2\
**Last updated:** [January 31, 2018, 8:44pm UTC](https://discuss.elastic.co/t/get-unique-count-of-most-recent-event/117712 "2018-01-31T20:44:34Z")

</div>

I have several devices, each with a unique id, where each has a field that can change value. I would like to get a count of those objects whose fields equals a particular value. For example, the foo.bar.wifiStatus field…

---

## [Update data from mysql to elasticsearch](https://discuss.elastic.co/t/update-data-from-mysql-to-elasticsearch/106817)

<div class="topic-metadata">

**Author:** [@Shekhar\_Pandey](https://discuss.elastic.co/u/Shekhar_Pandey)\
**Replies:** 4\
**Last updated:** [November 9, 2017, 6:51am UTC](https://discuss.elastic.co/t/update-data-from-mysql-to-elasticsearch/106817 "2017-11-09T06:51:54Z")

</div>

There is any way to fetch only update data from mysql to elasticsearch. I am using sql\_last\_value...but it will fetch only new row which comes in mysql.... Any way if I did change any previous index row in mysql...logst…

---

## [Reloading prospectors results in ERR in Filebeat 5.5.0](https://discuss.elastic.co/t/reloading-prospectors-results-in-err-in-filebeat-5-5-0/94512)

<div class="topic-metadata">

**Author:** [@dpaar](https://discuss.elastic.co/u/dpaar)\
**Replies:** 4\
**Last updated:** [August 29, 2017, 6:23am UTC](https://discuss.elastic.co/t/reloading-prospectors-results-in-err-in-filebeat-5-5-0/94512 "2017-08-29T06:23:00Z")

</div>

I'm using Filebeat 5.5.0 from https://artifacts.elastic.co/packages/5.x/apt stable main in a Docker container running ubuntu:16.04 to ship logs from Docker containers to logstash. When I start Filebeat, it correctly loa…

---

## [Distributed traces on background jobs](https://discuss.elastic.co/t/distributed-traces-on-background-jobs/256555)

<div class="topic-metadata">

**Author:** [@brightredchilli](https://discuss.elastic.co/u/brightredchilli)\
**Replies:** 3\
**Last updated:** [November 25, 2020, 11:28am UTC](https://discuss.elastic.co/t/distributed-traces-on-background-jobs/256555 "2020-11-25T11:28:58Z")

</div>

Hi, a question prodding feasability of getting distributed traces on asynchronous jobs. In my (Rails) application, web requests kick off background jobs that are processed in Sidekiq. I see the Sidekiq transaction and th…

---

## [\[WARN \]\[logstash.inputs.jdbc \] Exception when executing JDBC query {:exception=\>#\<Sequel::DatabaseError: Java::OrgLogstash::MissingConverterException: Missing Converter handling for full class name=org.postgresql.util.PGobject, simple name=PGobject\>}](https://discuss.elastic.co/t/warn-logstash-inputs-jdbc-exception-when-executing-jdbc-query-exception-sequel-java-missing-converter-handling-for-full-class-name-org-postgresql-util-pgobject-simple-name-pgobject/200407)

<div class="topic-metadata">

**Author:** [@abu](https://discuss.elastic.co/u/abu)\
**Replies:** 1\
**Last updated:** [September 20, 2019, 1:50pm UTC](https://discuss.elastic.co/t/warn-logstash-inputs-jdbc-exception-when-executing-jdbc-query-exception-sequel-java-missing-converter-handling-for-full-class-name-org-postgresql-util-pgobject-simple-name-pgobject/200407 "2019-09-20T13:50:23Z")

</div>

I want fetch data from postgresql DB that contain jsonb format input to logstash and output to elasticsearch but I get the warning message and didn't proceed next step

---

## [All indexes deleted (including .kibana)](https://discuss.elastic.co/t/all-indexes-deleted-including-kibana/140292)

<div class="topic-metadata">

**Author:** [@Jerzy\_Stopa](https://discuss.elastic.co/u/Jerzy_Stopa)\
**Replies:** 7\
**Last updated:** [July 17, 2018, 11:21am UTC](https://discuss.elastic.co/t/all-indexes-deleted-including-kibana/140292 "2018-07-17T11:21:34Z")

</div>

Hi, I suddenly lost all data in elasticsearch. It is single node system. Log shows following: \[2018-07-17T07:44:52,833\]\[INFO \]\[o.e.c.m.MetaDataDeleteIndexService\] \[n524Xf9\] \[.monitoring-kibana-6-2018.07.17/cY3e38j6T…

---

## [SearchSourceBuilder.from accepts an integer](https://discuss.elastic.co/t/searchsourcebuilder-from-accepts-an-integer/106300)

<div class="topic-metadata">

**Author:** [@kieran](https://discuss.elastic.co/u/kieran)\
**Replies:** 7\
**Last updated:** [November 3, 2017, 4:02pm UTC](https://discuss.elastic.co/t/searchsourcebuilder-from-accepts-an-integer/106300 "2017-11-03T16:02:33Z")

</div>

Hi The Java class SearchSourceBuilder has a method 'from', which takes an int. So if I'm paginating I will set this value. However, the SearchResponse has a method .getHits().getTotalHits() which returns a long. When d…

---

## [Pass auth ldap authentication to Kibana for iframe](https://discuss.elastic.co/t/pass-auth-ldap-authentication-to-kibana-for-iframe/93764)

<div class="topic-metadata">

**Author:** [@Mehdi\_Chilla](https://discuss.elastic.co/u/Mehdi_Chilla)\
**Replies:** 1\
**Last updated:** [July 21, 2017, 12:32pm UTC](https://discuss.elastic.co/t/pass-auth-ldap-authentication-to-kibana-for-iframe/93764 "2017-07-21T12:32:14Z")

</div>

Hello, I have an angularjs app that loads dashboards that I want to share with users with read-only privileges. My users authenticate via ldap (LDAP authentication by the apache front end that hosts my application supp…

---

## [\[kafka\] \[java.lang.ClassNotFoundException\] overriding partitioner\_class](https://discuss.elastic.co/t/kafka-java-lang-classnotfoundexception-overriding-partitioner-class/28527)

<div class="topic-metadata">

**Author:** [@steotia](https://discuss.elastic.co/u/steotia)\
**Replies:** 1\
**Last updated:** [September 12, 2015, 7:03pm UTC](https://discuss.elastic.co/t/kafka-java-lang-classnotfoundexception-overriding-partitioner-class/28527 "2015-09-12T19:03:40Z")

</div>

I created a partitioner\_class and replaced the partitioner\_class appropriately in the conf file. The jar containing the partitioner\_class was added to the CLASSPATH. However, when I started logstash, logstash errored o…

---

## [Slowness in percolator 7.2](https://discuss.elastic.co/t/slowness-in-percolator-7-2/200256)

<div class="topic-metadata">

**Author:** [@Faiz\_Ahmed\_Mushtak\_H](https://discuss.elastic.co/u/Faiz_Ahmed_Mushtak_H)\
**Replies:** 5\
**Last updated:** [September 24, 2019, 2:01pm UTC](https://discuss.elastic.co/t/slowness-in-percolator-7-2/200256 "2019-09-24T14:01:41Z")

</div>

We are migrating from 1.7 to 7.2 ES Our use case of percolator is pretty simple. We have around 120K percolators spread on a 5 node cluster. Percolator docs have meta fields that lets us filter out unnecessary queries t…

---

## [How to open kibana 6.2.1 in dev mode in windows](https://discuss.elastic.co/t/how-to-open-kibana-6-2-1-in-dev-mode-in-windows/121032)

<div class="topic-metadata">

**Author:** [@Sunny\_Sachan](https://discuss.elastic.co/u/Sunny_Sachan)\
**Replies:** 5\
**Last updated:** [February 23, 2018, 2:59pm UTC](https://discuss.elastic.co/t/how-to-open-kibana-6-2-1-in-dev-mode-in-windows/121032 "2018-02-23T14:59:30Z")

</div>

Hi all, I am working on changing some of the kibana src codes as per my requirements, now each time I am doing any change in kibana src code even after restarting the kibana server the bundle files are remaining the sam…

---

## [Kibana not allowing to set up indexes](https://discuss.elastic.co/t/kibana-not-allowing-to-set-up-indexes/77368)

<div class="topic-metadata">

**Author:** [@Ben\_Hoffman](https://discuss.elastic.co/u/Ben_Hoffman)\
**Replies:** 5\
**Last updated:** [March 7, 2017, 4:38pm UTC](https://discuss.elastic.co/t/kibana-not-allowing-to-set-up-indexes/77368 "2017-03-07T16:38:04Z")

</div>

So Kibana gets up and running, but as soon as I type in an index to use, it crashes. The indexes do show up in Elasticsearch, and i can even query then in Kibana before I type in my index. Kibana starts like normal... …

---

## [How to check the result of tokenizer after insert one document?](https://discuss.elastic.co/t/how-to-check-the-result-of-tokenizer-after-insert-one-document/57325)

<div class="topic-metadata">

**Author:** [@WangXiangUSTC](https://discuss.elastic.co/u/WangXiangUSTC)\
**Replies:** 5\
**Last updated:** [August 9, 2016, 2:43am UTC](https://discuss.elastic.co/t/how-to-check-the-result-of-tokenizer-after-insert-one-document/57325 "2016-08-09T02:43:28Z")

</div>

According to my requirement, I custom the analyzer.I know how to check the result using this analyzer, it look like this: curl -XGET "192.168.0.1:9200/test/\_analyze?pretty=1&analyzer=pattern\_analyzer" -d '2016/08/05 09:5…

---

## [Cannot update minimum\_master\_nodes](https://discuss.elastic.co/t/cannot-update-minimum-master-nodes/803)

<div class="topic-metadata">

**Author:** [@oellegaard](https://discuss.elastic.co/u/oellegaard)\
**Replies:** 5\
**Last updated:** [May 18, 2015, 8:24am UTC](https://discuss.elastic.co/t/cannot-update-minimum-master-nodes/803 "2015-05-18T08:24:44Z")

</div>

Hi there! When sending an update settings request to /\_cluster/settings with minimum\_master\_nodes I get the following log entry on my master nodes. It also does not apply the settings. \[2015-05-16 21:49:54,425\]\[WARN …

---

## [Facets problem with capital letters](https://discuss.elastic.co/t/facets-problem-with-capital-letters/10757)

<div class="topic-metadata">

**Author:** [@elastray](https://discuss.elastic.co/u/elastray)\
**Replies:** 5\
**Last updated:** [February 15, 2013, 8:04pm UTC](https://discuss.elastic.co/t/facets-problem-with-capital-letters/10757 "2013-02-15T20:04:43Z")

</div>

Hi, I am getting the facets in a search, but I have a problem, the capital letters of the terms are always lowercase, so Elastic Search and the app I am trying to integrate can't understand each other (actually, th…

[Previous page](https://discuss.elastic.co/top.md?page=871&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=873&per_page=50&period=all)
