# Top **URL:** https://discuss.elastic.co/top.md?page=893&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 894 --- ## [How can i install jdbc\_streaming filter plugin](https://discuss.elastic.co/t/how-can-i-install-jdbc-streaming-filter-plugin/97526)
**Author:** [@LiangxiongZhu](https://discuss.elastic.co/u/LiangxiongZhu)\ **Replies:** 2\ **Last updated:** [August 18, 2017, 1:09pm UTC](https://discuss.elastic.co/t/how-can-i-install-jdbc-streaming-filter-plugin/97526 "2017-08-18T13:09:06Z")
i want to use jdbc\_streaming filter plugin, but i get error, “Cannot create pipeline” reason: Couldn’t find any filter plugin named ‘jdbc\_streaming’. then i tried logstash-plugin install jdbc\_streaming. the result of V… --- ## [How to use Index pattern using REST API](https://discuss.elastic.co/t/how-to-use-index-pattern-using-rest-api/168978)
**Author:** [@smidev11](https://discuss.elastic.co/u/smidev11)\ **Replies:** 4\ **Last updated:** [February 21, 2019, 5:57am UTC](https://discuss.elastic.co/t/how-to-use-index-pattern-using-rest-api/168978 "2019-02-21T05:57:41Z")
Hi All, How to use Index pattern to search from multiple tables using low level rest client api. E.g , Lets assume I have following index names as: Index\_2019\_1 Index\_2019\_2 Index\_2018\_1 index\_2018\_2 Now I want get … --- ## [Overall Query TIme in Elastic Search](https://discuss.elastic.co/t/overall-query-time-in-elastic-search/28004)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 4\ **Last updated:** [August 26, 2015, 12:50pm UTC](https://discuss.elastic.co/t/overall-query-time-in-elastic-search/28004 "2015-08-26T12:50:12Z")
As mentioned here:- the query consists of two phases search and fetch. Their timings are given by search\_\* and fetch\_\* from the node stats. Is there a way I can get the average query time (which includes both search and … --- ## ["UNIX\_MS" Syntax in Date Plugin](https://discuss.elastic.co/t/unix-ms-syntax-in-date-plugin/59840)
**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\ **Replies:** 6\ **Last updated:** [September 13, 2016, 1:02am UTC](https://discuss.elastic.co/t/unix-ms-syntax-in-date-plugin/59840 "2016-09-13T01:02:18Z")
How should I use the "UNIX\_MS" Syntax in Date Plugin? Below is what I've tried and it does not work. I cannot find any examples of this online. date { match =\> \[ "my\_field", "MMM dd YYY HH:mm:ss", "MMM… --- ## [Unable to Start Elasticsearch 7.12 in Ubuntu 18.04](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-12-in-ubuntu-18-04/268330)
**Author:** [@chinkleet](https://discuss.elastic.co/u/chinkleet)\ **Replies:** 3\ **Last updated:** [March 25, 2021, 2:09pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-7-12-in-ubuntu-18-04/268330 "2021-03-25T14:09:05Z")
I have installed "elasticsearch" 7.12 version on Ubuntu 18.04 machine. when trying to start the "elasticsearch" service getting below error: (base) extramarks@extramarks-Latitude-3400:~/Downloads$ systemctl status ela… --- ## [Problem when indexing nested object (Elasticsearch 7.0.0 released)](https://discuss.elastic.co/t/problem-when-indexing-nested-object-elasticsearch-7-0-0-released/180368)
**Author:** [@aeljazouli](https://discuss.elastic.co/u/aeljazouli)\ **Replies:** 3\ **Last updated:** [May 10, 2019, 8:56am UTC](https://discuss.elastic.co/t/problem-when-indexing-nested-object-elasticsearch-7-0-0-released/180368 "2019-05-10T08:56:29Z")
Hi there, I have some problem when i want to index (by Kibana console) nested object. I got this error : \[ "type": "illegal\_argument\_exception", "reason": "object mapping \[transcription\] can't be changed from nested … --- ## [Cluster nodes doesn't reconnect](https://discuss.elastic.co/t/cluster-nodes-doesnt-reconnect/12691)
**Author:** [@planckiii](https://discuss.elastic.co/u/planckiii)\ **Replies:** 3\ **Last updated:** [July 10, 2013, 8:45am UTC](https://discuss.elastic.co/t/cluster-nodes-doesnt-reconnect/12691 "2013-07-10T08:45:08Z")
Hi, I have setup of elasticsearch 0.90.0 with two nodes, each one on different data center. From time to time cluster status goes "yellow": { "cluster\_name" : "my\_cluster", "status" : "yellow", "timed\_out" … --- ## [Apply ILM on rollup or transform index](https://discuss.elastic.co/t/apply-ilm-on-rollup-or-transform-index/294039)
**Author:** [@Achraf\_MENSI](https://discuss.elastic.co/u/Achraf_MENSI)\ **Replies:** 7\ **Last updated:** [January 28, 2022, 6:50am UTC](https://discuss.elastic.co/t/apply-ilm-on-rollup-or-transform-index/294039 "2022-01-28T06:50:59Z")
Hello, does anyone have successfully applied ILM on a transform or rollup index? or it's possible only with normal index? thanks --- ## [Logstash Stalling Out on Automatic Config Restart](https://discuss.elastic.co/t/logstash-stalling-out-on-automatic-config-restart/141849)
**Author:** [@kelbymcw](https://discuss.elastic.co/u/kelbymcw)\ **Replies:** 7\ **Last updated:** [July 30, 2018, 3:52pm UTC](https://discuss.elastic.co/t/logstash-stalling-out-on-automatic-config-restart/141849 "2018-07-30T15:52:30Z")
Hello, I've been slamming my head into the desk all day trying to solve this problem. I've set up my logstash to adapt to changes in the config file, but when I change it, it begins to shutdown the pipeline, but stalls, … --- ## [Analyzer \[not\_analyzed\] not found for field \[institution\]](https://discuss.elastic.co/t/analyzer-not-analyzed-not-found-for-field-institution/96068)
**Author:** [@virk](https://discuss.elastic.co/u/virk)\ **Replies:** 1\ **Last updated:** [August 7, 2017, 10:34am UTC](https://discuss.elastic.co/t/analyzer-not-analyzed-not-found-for-field-institution/96068 "2017-08-07T10:34:20Z")
I upgraded ES from 1 to 5.\* i am getting this error. Anyone can help me please? {"error":{"root\_cause":\[{"type":"mapper\_parsing\_exception","reason":"analyzer \[not\_analyzed\] not found for field \[institution\]"}\],"type":"… --- ## [Hourly rate pricing](https://discuss.elastic.co/t/hourly-rate-pricing/268231)
**Author:** [@accateo](https://discuss.elastic.co/u/accateo)\ **Replies:** 5\ **Last updated:** [March 25, 2021, 9:15am UTC](https://discuss.elastic.co/t/hourly-rate-pricing/268231 "2021-03-25T09:15:39Z")
Hi, I've created a new account in Elastic Cloud, with a trial period. Out of curiosity I wanted to check the "Billing" section and I noticed a strange cost. $ 0.2714 of "hourly rate" for "Cloud Standard Data High I… --- ## [Configure tcp input to accept syslog over ssl](https://discuss.elastic.co/t/configure-tcp-input-to-accept-syslog-over-ssl/237853)
**Author:** [@danona45](https://discuss.elastic.co/u/danona45)\ **Replies:** 5\ **Last updated:** [June 25, 2020, 4:30am UTC](https://discuss.elastic.co/t/configure-tcp-input-to-accept-syslog-over-ssl/237853 "2020-06-25T04:30:52Z")
This is my input config, but I don't get anything passed input in my pipeline or I would see something in my ruby debug output. No errors in the log. \> tcp { \> type =\> "syslog" \> port =\> "4000" \> … --- ## [Elasticsearch query on a nested field with condition](https://discuss.elastic.co/t/elasticsearch-query-on-a-nested-field-with-condition/213642)
**Author:** [@Noctis17](https://discuss.elastic.co/u/Noctis17)\ **Replies:** 5\ **Last updated:** [January 7, 2020, 1:22am UTC](https://discuss.elastic.co/t/elasticsearch-query-on-a-nested-field-with-condition/213642 "2020-01-07T01:22:05Z")
Elasticsearch v7.0 Hello and good day! I'm trying to create a query that will have a condition: if a nested field has only 1 element, get that first element, if a nested field has 2 more or elements, get a matching nes… --- ## [How do I get the trace.id of apmgrpc in gRPC?](https://discuss.elastic.co/t/how-do-i-get-the-trace-id-of-apmgrpc-in-grpc/173421)
**Author:** [@EDDYCJY](https://discuss.elastic.co/u/EDDYCJY)\ **Replies:** 5\ **Last updated:** [March 22, 2019, 7:32am UTC](https://discuss.elastic.co/t/how-do-i-get-the-trace-id-of-apmgrpc-in-grpc/173421 "2019-03-22T07:32:34Z")
I want to get the apm trace.id of the currently called method in the gRPC Interceptor. How can I get it? func TestInterceptor(ctx context.Context, req interface{}, info \*grpc.UnaryServerInfo, handler grpc.UnaryHandler) … --- ## [Datafeed stops immediately when performing custom machine learning job](https://discuss.elastic.co/t/datafeed-stops-immediately-when-performing-custom-machine-learning-job/87624)
**Author:** [@ptaladayuw](https://discuss.elastic.co/u/ptaladayuw)\ **Replies:** 5\ **Last updated:** [May 31, 2017, 4:46pm UTC](https://discuss.elastic.co/t/datafeed-stops-immediately-when-performing-custom-machine-learning-job/87624 "2017-05-31T16:46:56Z")
I'm working with the machine learning plugin for Elastic search and I'm trying to figure out why my datafeed immediately fails when starting the job shown below. I used logstash to pull in data from sql server. The logs … --- ## ["path" as a field name](https://discuss.elastic.co/t/path-as-a-field-name/8457)
**Author:** [@phill](https://discuss.elastic.co/u/phill)\ **Replies:** 5\ **Last updated:** [July 21, 2012, 8:44am UTC](https://discuss.elastic.co/t/path-as-a-field-name/8457 "2012-07-21T08:44:22Z")
I have been playing with ElasticSearch (wow! great stuff guys) I was working on defining a mapping for documents I already have in another Lucene index. The old index has a field called "path" "path" : { "type":"st… --- ## [How to add custom queries in one visualization?](https://discuss.elastic.co/t/how-to-add-custom-queries-in-one-visualization/102458)
**Author:** [@mounika](https://discuss.elastic.co/u/mounika)\ **Replies:** 2\ **Last updated:** [October 6, 2017, 1:51pm UTC](https://discuss.elastic.co/t/how-to-add-custom-queries-in-one-visualization/102458 "2017-10-06T13:51:13Z")
Hi, I have the below scenario, how to apply this scenario in one visualization? I have a component and different values in that component. each has unique name, I want to group the same set of names in one pie chart. f… --- ## [Running logstash in background in linux](https://discuss.elastic.co/t/running-logstash-in-background-in-linux/286517)
**Author:** [@mangeshs](https://discuss.elastic.co/u/mangeshs)\ **Replies:** 1\ **Last updated:** [October 12, 2021, 2:25pm UTC](https://discuss.elastic.co/t/running-logstash-in-background-in-linux/286517 "2021-10-12T14:25:53Z")
I want to run logstash in background on linux server i am using command like this on bin path nohup ./logstash -f sample.conf& is it correct way to run the logstash or anything else but then I need to read nohup.out … --- ## [Secure Filebeat to Logstash](https://discuss.elastic.co/t/secure-filebeat-to-logstash/143549)
**Author:** [@Chris\_Billett](https://discuss.elastic.co/u/Chris_Billett)\ **Replies:** 1\ **Last updated:** [August 8, 2018, 3:34pm UTC](https://discuss.elastic.co/t/secure-filebeat-to-logstash/143549 "2018-08-08T15:34:03Z")
Hi, I have setup a new ELK server running 6.3. I can can get my other servers to transfer data using filebeat without SSL but when I run SSL I receive the following: Filebeat log 2018-08-08T15:35:19+01:00 INFO Error p… --- ## [Configure sincedb in filebeat](https://discuss.elastic.co/t/configure-sincedb-in-filebeat/123672)
**Author:** [@sunilkumar](https://discuss.elastic.co/u/sunilkumar)\ **Replies:** 1\ **Last updated:** [March 14, 2018, 1:04pm UTC](https://discuss.elastic.co/t/configure-sincedb-in-filebeat/123672 "2018-03-14T13:04:02Z")
how to configure sincedb\_path =\> "/dev/null" ignore\_older =\> 0 in filebeat ? --- ## [Multiple destinations for failover](https://discuss.elastic.co/t/multiple-destinations-for-failover/112188)
**Author:** [@Mazhar](https://discuss.elastic.co/u/Mazhar)\ **Replies:** 4\ **Last updated:** [December 21, 2017, 1:46am UTC](https://discuss.elastic.co/t/multiple-destinations-for-failover/112188 "2017-12-21T01:46:28Z")
I am configuring the following at my end, output.kafka: enabled:true hosts:\["kafkahost1:port1","kafkahost2:port2"\] topic: topic\_name From the configuration I understand I am sending the same logs/event to multiple rec… --- ## [Limiting traffic speed](https://discuss.elastic.co/t/limiting-traffic-speed/276289)
**Author:** [@driveirk](https://discuss.elastic.co/u/driveirk)\ **Replies:** 3\ **Last updated:** [June 19, 2021, 3:12pm UTC](https://discuss.elastic.co/t/limiting-traffic-speed/276289 "2021-06-19T15:12:49Z")
When transferring shards, the network speed between 2 nodes can increase up to 16 G/s. I want to limit network usage to 7G/s for the entire cluster. Can this be done by means of ElasticSearch? The only network regulato… --- ## [Why isn't POST showing up in Kibana Discover tab?](https://discuss.elastic.co/t/why-isnt-post-showing-up-in-kibana-discover-tab/191034)
**Author:** [@samuelburnett](https://discuss.elastic.co/u/samuelburnett)\ **Replies:** 8\ **Last updated:** [July 17, 2019, 3:57pm UTC](https://discuss.elastic.co/t/why-isnt-post-showing-up-in-kibana-discover-tab/191034 "2019-07-17T15:57:51Z")
I am using the Developer Console in Kibana to add a document to my index. This is the command: POST my\_index/\_doc/test02?op\_type=create { "user": "USERTEST055" } I was wondering why this isn't showing up in the di… --- ## [NodeDisconnect Exception](https://discuss.elastic.co/t/nodedisconnect-exception/175936)
**Author:** [@aniaks](https://discuss.elastic.co/u/aniaks)\ **Replies:** 3\ **Last updated:** [April 9, 2019, 1:02pm UTC](https://discuss.elastic.co/t/nodedisconnect-exception/175936 "2019-04-09T13:02:15Z")
I see whole load of below exceptions in the log. May i know what could be causing this issue ? tried to fail engine but could not acquire lock - engine should be failed by now \[primary shar d \[\[index\_1\]\[13\], node\[e\_\_dq… --- ## [Need plugin for G-Suite Logs](https://discuss.elastic.co/t/need-plugin-for-g-suite-logs/146542)
**Author:** [@Ryan.Ivis](https://discuss.elastic.co/u/Ryan.Ivis)\ **Replies:** 3\ **Last updated:** [September 3, 2018, 8:55pm UTC](https://discuss.elastic.co/t/need-plugin-for-g-suite-logs/146542 "2018-09-03T20:55:10Z")
Hey all my business runs the G suite by google. I would love to get the logs from this platform into elastic. They have an API. Sumo logic does this out of the gate. I know there has to be a way. Any ideas? --- ## [Data Table multiple event IDs](https://discuss.elastic.co/t/data-table-multiple-event-ids/109971)
**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\ **Replies:** 3\ **Last updated:** [December 4, 2017, 3:30am UTC](https://discuss.elastic.co/t/data-table-multiple-event-ids/109971 "2017-12-04T03:30:37Z")
Trying to build a data table with split rows from multiple windows event ID's. Event ID 4648 - Network Logon with exp credentials Grabbing the following- Computer\_Name TargetUsername SubjectUsername TargetServer wor… --- ## [.NET NEST and logstash?](https://discuss.elastic.co/t/net-nest-and-logstash/62940)
**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\ **Replies:** 3\ **Last updated:** [October 13, 2016, 9:46pm UTC](https://discuss.elastic.co/t/net-nest-and-logstash/62940 "2016-10-13T21:46:09Z")
is there any way to index documents using .NET NEST but using logstash as endpoint? All my clients are spread over internet and only should connect to logstash public server only, not directly to ES. --- ## [LS failing to start with JDBC or multiple Input plugins](https://discuss.elastic.co/t/ls-failing-to-start-with-jdbc-or-multiple-input-plugins/35837)
**Author:** [@mvenkat\_in](https://discuss.elastic.co/u/mvenkat_in)\ **Replies:** 3\ **Last updated:** [November 30, 2015, 7:05am UTC](https://discuss.elastic.co/t/ls-failing-to-start-with-jdbc-or-multiple-input-plugins/35837 "2015-11-30T07:05:09Z")
Hi My LS config has 2 input plugins 1-FileBeats & 2-JDBC. Here are my queries or issues. 1) LS is failing to start with JDBC plugin and the database listner is down, even though the jdbc\_validate\_connection is set to f… --- ## [What are the most popular contextual terms (after/before) of an expression?](https://discuss.elastic.co/t/what-are-the-most-popular-contextual-terms-after-before-of-an-expression/29654)
**Author:** [@nicom](https://discuss.elastic.co/u/nicom)\ **Replies:** 3\ **Last updated:** [September 21, 2015, 4:03pm UTC](https://discuss.elastic.co/t/what-are-the-most-popular-contextual-terms-after-before-of-an-expression/29654 "2015-09-21T16:03:38Z")
Hi, I have a text field. I would like to get a list of all the most popular contextual terms related to an expression e.g. "great house". By context I mean most popular terms next or before the expression found in… --- ## [ClassNotFoundException : com.fasterxml.jackson.core.type.TypeReference](https://discuss.elastic.co/t/classnotfoundexception-com-fasterxml-jackson-core-type-typereference/294793)
**Author:** [@sadu](https://discuss.elastic.co/u/sadu)\ **Replies:** 6\ **Last updated:** [February 3, 2022, 10:56am UTC](https://discuss.elastic.co/t/classnotfoundexception-com-fasterxml-jackson-core-type-typereference/294793 "2022-02-03T10:56:26Z")
APM Server version: 1.28.4 \*\* Attaching APM agent \*\*: By VM option: -javaagent:lib/elastic-apm-agent.jar \*\* Java \*\*: 1.8 Hello, In our application we create view where admin can check current APM agent configurat… --- ## [Keep variables in Logstash](https://discuss.elastic.co/t/keep-variables-in-logstash/110501)
**Author:** [@moriol](https://discuss.elastic.co/u/moriol)\ **Replies:** 6\ **Last updated:** [December 8, 2017, 8:43am UTC](https://discuss.elastic.co/t/keep-variables-in-logstash/110501 "2017-12-08T08:43:04Z")
I have an xml file which I am currently ingesting and it is quite nested. To simplify it, I am splitting the filelds as follows: \<(Header|parameter|differentparameter) This is configured in the input section, with mult… --- ## [Issues Running ElasticSearch on Kibana](https://discuss.elastic.co/t/issues-running-elasticsearch-on-kibana/339123)
**Author:** [@Emily\_Miller](https://discuss.elastic.co/u/Emily_Miller)\ **Replies:** 2\ **Last updated:** [July 24, 2023, 6:50pm UTC](https://discuss.elastic.co/t/issues-running-elasticsearch-on-kibana/339123 "2023-07-24T18:50:47Z")
Hey all. I'm brand new to running Kibana, and I'm using a software called GrimoireLab that runs off of it and docker. I used to not have any issues setting it up, but every time I try to open my localhost now it says ERR… --- ## [Error: Could not create the Java Virtual Machine. ES won't start](https://discuss.elastic.co/t/error-could-not-create-the-java-virtual-machine-es-wont-start/317581)
**Author:** [@rrrrrrrrrrr](https://discuss.elastic.co/u/rrrrrrrrrrr)\ **Replies:** 2\ **Last updated:** [October 31, 2022, 2:20am UTC](https://discuss.elastic.co/t/error-could-not-create-the-java-virtual-machine-es-wont-start/317581 "2022-10-31T02:20:44Z")
Hello, I've tried to follow this step https://discuss.elastic.co/t/elasticsearch-logs-are-getting-piled-up-in-var-log-elasticsearch-path-how-to-cater-to-this-problem/186039 to do the log rotation but when I tried to res… --- ## [Will Increasing the setting script.max\_compilations\_rate from 75/5m to 300/m effect perfomance?](https://discuss.elastic.co/t/will-increasing-the-setting-script-max-compilations-rate-from-75-5m-to-300-m-effect-perfomance/240781)
**Author:** [@Sravanti](https://discuss.elastic.co/u/Sravanti)\ **Replies:** 2\ **Last updated:** [July 13, 2020, 9:45am UTC](https://discuss.elastic.co/t/will-increasing-the-setting-script-max-compilations-rate-from-75-5m-to-300-m-effect-perfomance/240781 "2020-07-13T09:45:13Z")
I'm getting remote transport exception while executing painless scripts. Need to know if it will really effect performance, if we increase from its actual limit i.e 75/5m to 200-300/1m. if not, is there any alternative … --- ## [SSL / HTTPS Connection with Low Level Rest API?](https://discuss.elastic.co/t/ssl-https-connection-with-low-level-rest-api/94999)
**Author:** [@khatkarrohit](https://discuss.elastic.co/u/khatkarrohit)\ **Replies:** 2\ **Last updated:** [August 4, 2017, 5:56pm UTC](https://discuss.elastic.co/t/ssl-https-connection-with-low-level-rest-api/94999 "2017-08-04T17:56:28Z")
I am using low level rest API to access Elastic Search in AWS (AWS Service). Aws provides the HTTPS url. @Bean public RestClient restClient() throws Exception { RestClient restClient = RestClient.builder… --- ## [Cant assign an nested ip from a json input to geoip](https://discuss.elastic.co/t/cant-assign-an-nested-ip-from-a-json-input-to-geoip/48292)
**Author:** [@avisri](https://discuss.elastic.co/u/avisri)\ **Replies:** 2\ **Last updated:** [April 26, 2016, 8:56pm UTC](https://discuss.elastic.co/t/cant-assign-an-nested-ip-from-a-json-input-to-geoip/48292 "2016-04-26T20:56:25Z")
Run this command $echo '{ "columns" : { "remote\_address": "8.8.8.8"} }' | /opt/logstash/bin/logstash --debug -e 'filter { json{ source =\>message } geoip { source =\> "%{\[columns\]\[remote\_address\]}" } } snipped de… --- ## [Elastic search transport client singleton](https://discuss.elastic.co/t/elastic-search-transport-client-singleton/14766)
**Author:** [@cyrilforce](https://discuss.elastic.co/u/cyrilforce)\ **Replies:** 2\ **Last updated:** [December 10, 2013, 8:20am UTC](https://discuss.elastic.co/t/elastic-search-transport-client-singleton/14766 "2013-12-10T08:20:50Z")
Hi All, I had created a transport client singleton that's being used in a web application. I would like to know that if i didn't close the transport client will it create memory leaks as we do re-deploy the web ap… --- ## [Spark + Elastic search write performance issue](https://discuss.elastic.co/t/spark-elastic-search-write-performance-issue/104422)
**Author:** [@Saravanan\_Balakrishn](https://discuss.elastic.co/u/Saravanan_Balakrishn)\ **Replies:** 1\ **Last updated:** [October 31, 2017, 7:08pm UTC](https://discuss.elastic.co/t/spark-elastic-search-write-performance-issue/104422 "2017-10-31T19:08:22Z")
Seeing low # of writes to elasticsearch using spark java. Here are the Configurations using 13.xlarge machines for ES cluster 4 instances each have 4 processors. Set refresh interval to -1 and replications to '0' and… --- ## [Time range search fails](https://discuss.elastic.co/t/time-range-search-fails/13841)
**Author:** [@subin](https://discuss.elastic.co/u/subin)\ **Replies:** 7\ **Last updated:** [October 4, 2013, 7:03pm UTC](https://discuss.elastic.co/t/time-range-search-fails/13841 "2013-10-04T19:03:02Z")
Hello, I have a Logstash \> ES (v 0.90.5) setup. I have date/time of the format - Oct 3 22:30:55. I have this mapping as a template in ES. You may see that @fields.date mapping is set as - "date": { "type": "dat… --- ## [Search elements of an array in nested documents](https://discuss.elastic.co/t/search-elements-of-an-array-in-nested-documents/216057)
**Author:** [@styks90](https://discuss.elastic.co/u/styks90)\ **Replies:** 5\ **Last updated:** [January 23, 2020, 4:11pm UTC](https://discuss.elastic.co/t/search-elements-of-an-array-in-nested-documents/216057 "2020-01-23T16:11:28Z")
Suppose I have an index which looks like this: # dummy index PUT nested { "mappings": { "properties": { "address": { "type": "nested", "properties": { "city": { "type": … --- ## [Filebeat Sending Whole File Repeatedly](https://discuss.elastic.co/t/filebeat-sending-whole-file-repeatedly/127002)
**Author:** [@derekcal](https://discuss.elastic.co/u/derekcal)\ **Replies:** 5\ **Last updated:** [April 9, 2018, 7:38am UTC](https://discuss.elastic.co/t/filebeat-sending-whole-file-repeatedly/127002 "2018-04-09T07:38:30Z")
Hello everyone, so I have configure filebeat to send a its own configurations to kafka, the issue is that filebeat keeps shipping the configs every 10s even though there are no changes to these files. Is there any way to… --- ## [Curator - delete all indices based on "alias" name (prefix+timestring)](https://discuss.elastic.co/t/curator-delete-all-indices-based-on-alias-name-prefix-timestring/99588)
**Author:** [@olc-olivier](https://discuss.elastic.co/u/olc-olivier)\ **Replies:** 5\ **Last updated:** [September 6, 2017, 4:10pm UTC](https://discuss.elastic.co/t/curator-delete-all-indices-based-on-alias-name-prefix-timestring/99588 "2017-09-06T16:10:01Z")
Hi, I would like delete all indices older than xxx days based on alias name (prefix+timestring) and not index name. Is it possible ? action: delete\_indices \>\>\> action: delete\_indices\_from\_alias ex: alias \> log-2017… --- ## [Search multi match query in Elasticsearch](https://discuss.elastic.co/t/search-multi-match-query-in-elasticsearch/71462)
**Author:** [@hatienkma](https://discuss.elastic.co/u/hatienkma)\ **Replies:** 5\ **Last updated:** [January 19, 2017, 8:29am UTC](https://discuss.elastic.co/t/search-multi-match-query-in-elasticsearch/71462 "2017-01-19T08:29:16Z")
Hello, I use elasticsearch-php v2.x. My maps here: { "took" : 2, "timed\_out" : false, "\_shards" : { "total" : 5, "successful" : 5, "failed" : 0 }, "hits" : { "total" : 176983, "max… --- ## [Logstash configuration: filters using GROK different logs from one type of log file](https://discuss.elastic.co/t/logstash-configuration-filters-using-grok-different-logs-from-one-type-of-log-file/47055)
**Author:** [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)\ **Replies:** 5\ **Last updated:** [April 13, 2016, 12:06am UTC](https://discuss.elastic.co/t/logstash-configuration-filters-using-grok-different-logs-from-one-type-of-log-file/47055 "2016-04-13T00:06:59Z")
it showing double values in kibana help me out input { file { path =\> "/var/log/aupm.log\*" } } filter { grok { match =\> { "message" =\> "%{DATESTAMP:timestamp} %{WORD:info} %{SPACE} %{NOTS… --- ## [Cannot install shield plugin in elasticsearch](https://discuss.elastic.co/t/cannot-install-shield-plugin-in-elasticsearch/62052)
**Author:** [@ANU\_SARA\_VARGHESE](https://discuss.elastic.co/u/ANU_SARA_VARGHESE)\ **Replies:** 4\ **Last updated:** [October 4, 2016, 10:08am UTC](https://discuss.elastic.co/t/cannot-install-shield-plugin-in-elasticsearch/62052 "2016-10-04T10:08:21Z")
Hi, I am trying to install shield 2.4.0 plugin in elasticsearch. But I am receiving the following error root@ip-x-x-x-x:/usr/share/elasticsearch/bin# ./plugin install shield -\> Installing shield... Trying https://do… --- ## [XML filter help](https://discuss.elastic.co/t/xml-filter-help/54050)
**Author:** [@sar](https://discuss.elastic.co/u/sar)\ **Replies:** 4\ **Last updated:** [June 29, 2016, 6:03am UTC](https://discuss.elastic.co/t/xml-filter-help/54050 "2016-06-29T06:03:30Z")
Hi, I'm trying to import a log file which contains an XML message embedded in each line in to elasticsearch using logstash. I use KV filter to extract the XML message. Then I'm trying to extract several values from t… --- ## [Problem launching Elasticsearch on Windows 10](https://discuss.elastic.co/t/problem-launching-elasticsearch-on-windows-10/163396)
**Author:** [@Peterleforlag](https://discuss.elastic.co/u/Peterleforlag)\ **Replies:** 3\ **Last updated:** [January 9, 2019, 11:39am UTC](https://discuss.elastic.co/t/problem-launching-elasticsearch-on-windows-10/163396 "2019-01-09T11:39:55Z")
I get the following error log while launching elasticsearch. \[2019-01-08T16:18:02,337\]\[ERROR\]\[o.e.b.Bootstrap \] \[LRI-L03240\] Exception org.elasticsearch.transport.BindTransportException: Failed to bind to \[930… --- ## [Muliline logstash](https://discuss.elastic.co/t/muliline-logstash/41617)
**Author:** [@l1carter](https://discuss.elastic.co/u/l1carter)\ **Replies:** 3\ **Last updated:** [May 2, 2016, 7:01pm UTC](https://discuss.elastic.co/t/muliline-logstash/41617 "2016-05-02T19:01:26Z")
general question here as I'm not sure I understand the multiline filter quite yet. sorry if this has been answered many times before. I tried searching a bit but didn't find a clear example. what I'm looking to do is com… --- ## [Okta - ElastiCloud - We hit an authentication error. Please check your credentials and try again](https://discuss.elastic.co/t/okta-elasticloud-we-hit-an-authentication-error-please-check-your-credentials-and-try-again/300882)
**Author:** [@chasep](https://discuss.elastic.co/u/chasep)\ **Replies:** 1\ **Last updated:** [April 11, 2022, 10:54am UTC](https://discuss.elastic.co/t/okta-elasticloud-we-hit-an-authentication-error-please-check-your-credentials-and-try-again/300882 "2022-04-11T10:54:00Z")
Hi, Setting up OKTA\<-\>ElasticCloud SAML 2.0. For Reference, I have followed the steps from following. Integrating Elastic Cloud Kibana with Okta SAML SSO in 2021 - BioTeam Secure your clusters with SAML | Elasticsea… --- ## [What's means? \[cloudoc1\] value for setting "discovery.zen.minimum\_master\_nodes" is too low](https://discuss.elastic.co/t/whats-means-cloudoc1-value-for-setting-discovery-zen-minimum-master-nodes-is-too-low/155323)
**Author:** [@ksb304](https://discuss.elastic.co/u/ksb304)\ **Replies:** 1\ **Last updated:** [November 5, 2018, 6:12am UTC](https://discuss.elastic.co/t/whats-means-cloudoc1-value-for-setting-discovery-zen-minimum-master-nodes-is-too-low/155323 "2018-11-05T06:12:00Z")
log \[2018-11-05T10:21:26,407\]\[WARN \]\[o.e.d.z.ElectMasterService\] \[cloudoc1\] value for setting "discovery.zen.minimum\_master\_nodes" is too low. This can result in data loss! Please set it to at least a quorum of master-e… [Previous page](https://discuss.elastic.co/top.md?page=892&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=894&per_page=50&period=all)