# Top **URL:** https://discuss.elastic.co/top.md?page=90&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 91 --- ## [Remove { and " from field name?](https://discuss.elastic.co/t/remove-and-from-field-name/106977)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 10\ **Last updated:** [November 16, 2017, 6:29am UTC](https://discuss.elastic.co/t/remove-and-from-field-name/106977 "2017-11-16T06:29:59Z")
Hi, I'm outputting some log data to disk where and logstash is marking the first field name with { and the last field value with }. For whatever reason I also have a field name called "date so that field isn't parsed by… --- ## [Enrich coordination queue at capacity](https://discuss.elastic.co/t/enrich-coordination-queue-at-capacity/258048)
**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\ **Replies:** 14\ **Last updated:** [December 9, 2020, 11:48pm UTC](https://discuss.elastic.co/t/enrich-coordination-queue-at-capacity/258048 "2020-12-09T23:48:16Z")
I'm currently using the enrich processors to enrich my data coming in. It's been working great however more recently when I increase the indexing rate, I start to get the below error: \[16:47:15\] \[ELASTIC\] Row Error { ty… --- ## [Logstash 7.10 is ignoring custom index template](https://discuss.elastic.co/t/logstash-7-10-is-ignoring-custom-index-template/258615)
**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\ **Replies:** 26\ **Last updated:** [December 18, 2020, 2:35pm UTC](https://discuss.elastic.co/t/logstash-7-10-is-ignoring-custom-index-template/258615 "2020-12-18T14:35:56Z")
Hi, This is a fresh installation of ELK 7.10.0. I am trying to configure Logstash to process .csv files and index into ES. I created a config file and a custom index template. It looks like the .csv are being processed,… --- ## [How to read log json array format with filebeat](https://discuss.elastic.co/t/how-to-read-log-json-array-format-with-filebeat/96220)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 10\ **Last updated:** [August 23, 2017, 2:36am UTC](https://discuss.elastic.co/t/how-to-read-log-json-array-format-with-filebeat/96220 "2017-08-23T02:36:42Z")
I have many log look like (json array) This is raw log \[{"CreationTime":"2017-06-17T06:28:56","Id":"77bf08c6-5bb9-4333-a394-03f181d7250a","Operation":"UserLoggedIn","OrganizationId":"4ebc33361-871a-44c5-93a5-60eb59091… --- ## [No hits when do a text search in an attachment for .docx file](https://discuss.elastic.co/t/no-hits-when-do-a-text-search-in-an-attachment-for-docx-file/41779)
**Author:** [@MaryOConnor](https://discuss.elastic.co/u/MaryOConnor)\ **Replies:** 10\ **Last updated:** [February 29, 2016, 4:38pm UTC](https://discuss.elastic.co/t/no-hits-when-do-a-text-search-in-an-attachment-for-docx-file/41779 "2016-02-29T16:38:02Z")
Hi, I'm new to elasticsearch. I'm using version 2.2.0 of Elasticsearch. I am able to index a .txt file and a .doc file and do a search and get a hit. However, when I try to index a .docx file, I do not get any hits… --- ## [ILM - Delete beat data after 30 days](https://discuss.elastic.co/t/ilm-delete-beat-data-after-30-days/288992)
**Author:** [@maltewhiite](https://discuss.elastic.co/u/maltewhiite)\ **Replies:** 12\ **Last updated:** [November 16, 2021, 1:14pm UTC](https://discuss.elastic.co/t/ilm-delete-beat-data-after-30-days/288992 "2021-11-16T13:14:31Z")
Hello Elastic We are ingesting a lot of data into Elastic. We are using index templates. But our servers are filling up. I want to automate the cleaning of old data, instead of having to manually watch when they're fi… --- ## [Problem with Filebeat and Kibana](https://discuss.elastic.co/t/problem-with-filebeat-and-kibana/202806)
**Author:** [@Jonathan\_Sieger](https://discuss.elastic.co/u/Jonathan_Sieger)\ **Replies:** 9\ **Last updated:** [October 15, 2019, 11:41am UTC](https://discuss.elastic.co/t/problem-with-filebeat-and-kibana/202806 "2019-10-15T11:41:06Z")
Hi, I use Filebeat 7.4 and Kibana 7.3.2 . Filebeat receive cleanly the log. But he don't forwad to Kibana. When I do : filebeat setup I have this result : Index setup finished. Loading dashboards (Kibana must be run… --- ## [Bug Report : Memory leak when readiness probe Curls to check the cluster health when security is enabled](https://discuss.elastic.co/t/bug-report-memory-leak-when-readiness-probe-curls-to-check-the-cluster-health-when-security-is-enabled/193445)
**Author:** [@Cyril\_James](https://discuss.elastic.co/u/Cyril_James)\ **Replies:** 23\ **Last updated:** [August 21, 2019, 1:24pm UTC](https://discuss.elastic.co/t/bug-report-memory-leak-when-readiness-probe-curls-to-check-the-cluster-health-when-security-is-enabled/193445 "2019-08-21T13:24:11Z")
When I install elasticsearch using "https://github.com/elastic/helm-charts/tree/master/elasticsearch" with security enabled, I could observe that there is memory leak. Memory usage by each pod keeps on increasing and it … --- ## [Safe numerical return value in scripted fields. Avoiding "null pointers" in filters using scripted fields](https://discuss.elastic.co/t/safe-numerical-return-value-in-scripted-fields-avoiding-null-pointers-in-filters-using-scripted-fields/184816)
**Author:** [@ebalmeida](https://discuss.elastic.co/u/ebalmeida)\ **Replies:** 9\ **Last updated:** [July 24, 2019, 7:02am UTC](https://discuss.elastic.co/t/safe-numerical-return-value-in-scripted-fields-avoiding-null-pointers-in-filters-using-scripted-fields/184816 "2019-07-24T07:02:08Z")
Hi, TL/DR: Is there a safe return value, for a numeric scripted field, that would behave like a non-existing field in a document (for filtering purposes)? Btw, I think this ends up relating to another topic I posted. F… --- ## [Mappingがマージされてしまう件](https://discuss.elastic.co/t/mapping/93710)
**Author:** [@atsuizo](https://discuss.elastic.co/u/atsuizo)\ **Replies:** 9\ **Last updated:** [July 24, 2017, 2:58am UTC](https://discuss.elastic.co/t/mapping/93710 "2017-07-24T02:58:21Z")
最近触り始めた者ですが、インデックスとマッピングについて意図したとおりに作成できず、 お力添えいただければと思います。 Linux上ですべてyumで構築した Logstash-Elasticsearch-Kibana の構成において、 ・任意のフォーマットのファイルA -\> /etc/logstash/conf.d/ファイルA用の定義 -\> elasticsearch index =\> A -\> A用のマッピングテンプレート ・任意… --- ## [Elasticsearch Nest - JsonParsingException expected:'{',](https://discuss.elastic.co/t/elasticsearch-nest-jsonparsingexception-expected/195801)
**Author:** [@Airn5475](https://discuss.elastic.co/u/Airn5475)\ **Replies:** 10\ **Last updated:** [August 22, 2019, 12:36pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-jsonparsingexception-expected/195801 "2019-08-22T12:36:46Z")
I am in the process of updating my application to use Elasticsearch 7.3. I updated my mappings { "mappings": { "properties": { "location": { "type": "geo\_point" } } } } Here's part of a… --- ## [\[IIS 7.5\] \[Filebeat 6.6.1\] Provided Grok expressions do not match field value](https://discuss.elastic.co/t/iis-7-5-filebeat-6-6-1-provided-grok-expressions-do-not-match-field-value/171730)
**Author:** [@nyarlath](https://discuss.elastic.co/u/nyarlath)\ **Replies:** 10\ **Last updated:** [April 1, 2019, 3:02pm UTC](https://discuss.elastic.co/t/iis-7-5-filebeat-6-6-1-provided-grok-expressions-do-not-match-field-value/171730 "2019-04-01T15:02:49Z")
Hello all, This is giving me headaches. I know there is a lot of posts regarding this issue, but I did not find any real solution. I'll try to be as comprehensive as possible. I want to send logs directly to Elastic f… --- ## [Impossible de définir mon field comme un geo\_point](https://discuss.elastic.co/t/impossible-de-definir-mon-field-comme-un-geo-point/216703)
**Author:** [@IneedHelp](https://discuss.elastic.co/u/IneedHelp)\ **Replies:** 29\ **Last updated:** [February 6, 2020, 3:53pm UTC](https://discuss.elastic.co/t/impossible-de-definir-mon-field-comme-un-geo-point/216703 "2020-02-06T15:53:16Z")
Bonjour, Je vais d'abord expliquer le contexte. Je développe un outil pour analyser différent type de logs et en tirer le maximum d'information. J'utilise filebeat, logstash, elactic et kibana pour la partie traitement/… --- ## [Filebeat issue](https://discuss.elastic.co/t/filebeat-issue/139151)
**Author:** [@amritesh\_mishra](https://discuss.elastic.co/u/amritesh_mishra)\ **Replies:** 10\ **Last updated:** [July 10, 2018, 10:40am UTC](https://discuss.elastic.co/t/filebeat-issue/139151 "2018-07-10T10:40:15Z")
When i am starting the service of filebeat it is giving this error. Starting filebeat: Exiting: error unpacking config data: more than one namespace configured accessing 'output' (source:'/etc/filebeat/filebeat.yml') w… --- ## [Not able to fire command for curator](https://discuss.elastic.co/t/not-able-to-fire-command-for-curator/24891)
**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\ **Replies:** 11\ **Last updated:** [December 15, 2015, 9:24pm UTC](https://discuss.elastic.co/t/not-able-to-fire-command-for-curator/24891 "2015-12-15T21:24:19Z")
Hi Experts , Recently I have installed curator to manage indices on windows machine and I am using elasticsearch1.6.0 with shield .I have 6 indices in ES and i want to show them using curator. In cmd i just typed "c… --- ## [Why the JVM heap of ES is always about 50%?](https://discuss.elastic.co/t/why-the-jvm-heap-of-es-is-always-about-50/94755)
**Author:** [@KeithTt](https://discuss.elastic.co/u/KeithTt)\ **Replies:** 16\ **Last updated:** [August 7, 2017, 8:02am UTC](https://discuss.elastic.co/t/why-the-jvm-heap-of-es-is-always-about-50/94755 "2017-08-07T08:02:01Z")
ES version: 5.5.1 Is this a coincidence or something else? --- ## [Transport publishing names vs new +7.0 format and es.transport.cname\_in\_publish\_address](https://discuss.elastic.co/t/transport-publishing-names-vs-new-7-0-format-and-es-transport-cname-in-publish-address/214362)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 10\ **Last updated:** [January 9, 2020, 12:27pm UTC](https://discuss.elastic.co/t/transport-publishing-names-vs-new-7-0-format-and-es-transport-cname-in-publish-address/214362 "2020-01-09T12:27:33Z")
Got a 7.5.1 cluster of 12 nodes where the elected master node logs deprecation warnings like these per cluster node very frequently: \[2020-01-09T08:52:41,809\]\[WARN \]\[o.e.d.t.TransportInfo \] \[es-mst2\] transport.publi… --- ## [Delete by query with plugin not work for me](https://discuss.elastic.co/t/delete-by-query-with-plugin-not-work-for-me/46732)
**Author:** [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)\ **Replies:** 9\ **Last updated:** [April 19, 2016, 3:51pm UTC](https://discuss.elastic.co/t/delete-by-query-with-plugin-not-work-for-me/46732 "2016-04-19T15:51:01Z")
Hello Guys, I have the last ELK version, and I installed the plugin delete-by-query and my forwarder is Logstash. I had read the documentation 2.3 in ELK site. First TO check if my struct is the same as ex… --- ## [ES Cluster via proxy IP, but listener timeout after waiting for \[30000\] ms](https://discuss.elastic.co/t/es-cluster-via-proxy-ip-but-listener-timeout-after-waiting-for-30000-ms/116192)
**Author:** [@lauea](https://discuss.elastic.co/u/lauea)\ **Replies:** 11\ **Last updated:** [January 22, 2018, 9:52am UTC](https://discuss.elastic.co/t/es-cluster-via-proxy-ip-but-listener-timeout-after-waiting-for-30000-ms/116192 "2018-01-22T09:52:22Z")
Hi Everyone, I ran into below issue. My ES cluster has 3 nodes, and I setup one proxy IP, you can regard it as Loadbalance IP, which points to 3 nodes with ip\_hash. ES Version: 6.0.0 But when I call search API via es… --- ## [Kibana server working but blank](https://discuss.elastic.co/t/kibana-server-working-but-blank/72180)
**Author:** [@Pedro\_Vilas-Boas](https://discuss.elastic.co/u/Pedro_Vilas-Boas)\ **Replies:** 9\ **Last updated:** [January 19, 2017, 4:38pm UTC](https://discuss.elastic.co/t/kibana-server-working-but-blank/72180 "2017-01-19T16:38:42Z")
Hey, recently upgraded to kibana 5.1.1 on centos 7.2. Server is working fine, i go to localhost:5601 and the new (pinker) kibana loads good but everything is blank like in the printscreen: Even if i click on the other… --- ## [Clarification around unicast host discovery w/ round-robin dns](https://discuss.elastic.co/t/clarification-around-unicast-host-discovery-w-round-robin-dns/14736)
**Author:** [@kevins](https://discuss.elastic.co/u/kevins)\ **Replies:** 12\ **Last updated:** [September 15, 2015, 10:05pm UTC](https://discuss.elastic.co/t/clarification-around-unicast-host-discovery-w-round-robin-dns/14736 "2015-09-15T22:05:38Z")
Our environment does not support multicast, therefore we are doing manual host discovery with something like: discovery.zen.ping.unicast.hosts \["es1.ourdomain.com:9300","es2.ourdomain.com:9300"\] The question I … --- ## [Can I use gzip or some other compression algorithms when I create snapshots to HDFS?](https://discuss.elastic.co/t/can-i-use-gzip-or-some-other-compression-algorithms-when-i-create-snapshots-to-hdfs/188600)
**Author:** [@wangxr1985](https://discuss.elastic.co/u/wangxr1985)\ **Replies:** 20\ **Last updated:** [July 22, 2019, 8:48am UTC](https://discuss.elastic.co/t/can-i-use-gzip-or-some-other-compression-algorithms-when-i-create-snapshots-to-hdfs/188600 "2019-07-22T08:48:38Z")
This is the document of repository-hdfs: https://www.elastic.co/guide/en/elasticsearch/plugins/master/repository-hdfs-config.html I can't find any compression algorithms arguments about HDFS when I use snapshot to do … --- ## [The best input option for Logstash](https://discuss.elastic.co/t/the-best-input-option-for-logstash/32774)
**Author:** [@y3g0r](https://discuss.elastic.co/u/y3g0r)\ **Replies:** 10\ **Last updated:** [March 10, 2016, 8:18am UTC](https://discuss.elastic.co/t/the-best-input-option-for-logstash/32774 "2016-03-10T08:18:32Z")
Hi there, Our team is working on creating some instant messaging applications. We would like to gather logs from our applications with logstash. As we are developing, we can use whatever technique to produce/store lo… --- ## [Examples for setting up Beats (modules) \> Logstash \> ES with ILM?](https://discuss.elastic.co/t/examples-for-setting-up-beats-modules-logstash-es-with-ilm/182045)
**Author:** [@pdizz](https://discuss.elastic.co/u/pdizz)\ **Replies:** 9\ **Last updated:** [June 11, 2019, 7:43pm UTC](https://discuss.elastic.co/t/examples-for-setting-up-beats-modules-logstash-es-with-ilm/182045 "2019-06-11T19:43:00Z")
Are there any basic configuration examples showing how to set up a Beats (with modules and dashboards) \> Logstash \> ES pipeline using Index Lifecycle Management? Currently I'm familiar with the "classic" setup with Metri… --- ## [Node Discovery Elasticsearch 7.0.0](https://discuss.elastic.co/t/node-discovery-elasticsearch-7-0-0/180227)
**Author:** [@Tyler\_Buckwalter](https://discuss.elastic.co/u/Tyler_Buckwalter)\ **Replies:** 12\ **Last updated:** [May 9, 2019, 4:28pm UTC](https://discuss.elastic.co/t/node-discovery-elasticsearch-7-0-0/180227 "2019-05-09T16:28:16Z")
Having a problem joining nodes into a cluster. The two I'm using to troubleshoot are 10.21.5.14 and 10.21.5.15. They seem to join the same cluster\_uuid, but don't recognize each other as nodes. Netstats are run - both… --- ## [Mustache throwing NoClassDefFoundError](https://discuss.elastic.co/t/mustache-throwing-noclassdeffounderror/128356)
**Author:** [@ishim](https://discuss.elastic.co/u/ishim)\ **Replies:** 17\ **Last updated:** [May 21, 2018, 5:02pm UTC](https://discuss.elastic.co/t/mustache-throwing-noclassdeffounderror/128356 "2018-05-21T17:02:48Z")
Hi, I am writing a java plugin which uses Mustache and NoClassDefFoundError exception is thrown by ElasticSearch, When I am trying to create an instance of class "MustacheScriptEngineService". final ScriptEngineService… --- ## [How can I send custom logs in a specific location to filebeat running inside docker](https://discuss.elastic.co/t/how-can-i-send-custom-logs-in-a-specific-location-to-filebeat-running-inside-docker/322106)
**Author:** [@Raja\_Muneer](https://discuss.elastic.co/u/Raja_Muneer)\ **Replies:** 18\ **Last updated:** [December 29, 2022, 4:29pm UTC](https://discuss.elastic.co/t/how-can-i-send-custom-logs-in-a-specific-location-to-filebeat-running-inside-docker/322106 "2022-12-29T16:29:56Z")
I am new to filebeat and elk. I am trying to send custom logs using filebeat to Elasticsearch directly.Both the elk stack and filebeat are running inside docker containers.. The custom logs are in the folder home/usernam… --- ## [Filebeat, File was truncated. Begin reading file from offset 0](https://discuss.elastic.co/t/filebeat-file-was-truncated-begin-reading-file-from-offset-0/74526)
**Author:** [@KDerksen](https://discuss.elastic.co/u/KDerksen)\ **Replies:** 9\ **Last updated:** [March 1, 2017, 8:13am UTC](https://discuss.elastic.co/t/filebeat-file-was-truncated-begin-reading-file-from-offset-0/74526 "2017-03-01T08:13:09Z")
Filebeat version: 5.1.2 OS: Debian Jessie I am trying to set up an IIS log dashboard for the company i work for. So i set up a Filebeat\>Logstash\>Elasticsearch\>Grafana server. For a few days i thought everything was wor… --- ## [Timestamp timezone](https://discuss.elastic.co/t/timestamp-timezone/297893)
**Author:** [@ziv1](https://discuss.elastic.co/u/ziv1)\ **Replies:** 9\ **Last updated:** [February 25, 2022, 2:09pm UTC](https://discuss.elastic.co/t/timestamp-timezone/297893 "2022-02-25T14:09:48Z")
That there is problem. Maybe if you only work on one timezone, or on each timezone separately, it's not a problem, but, for us that work in various timezones and pull data form them to a central location, this means w… --- ## [Filebeat output to file](https://discuss.elastic.co/t/filebeat-output-to-file/314135)
**Author:** [@sriramb12](https://discuss.elastic.co/u/sriramb12)\ **Replies:** 17\ **Last updated:** [September 12, 2022, 2:58am UTC](https://discuss.elastic.co/t/filebeat-output-to-file/314135 "2022-09-12T02:58:16Z")
New to the filebeat and to elastic. I need to fetch o365 logs from azure tenant. I dont want to use ELK stack but just get the json files I configured /etc/filebeat/modules.d/o365.yml also file output under /etc/file… --- ## [Error: Invalid snapshot name snapshot with the same name already in-progress](https://discuss.elastic.co/t/error-invalid-snapshot-name-snapshot-with-the-same-name-already-in-progress/283661)
**Author:** [@Busra\_Duygu](https://discuss.elastic.co/u/Busra_Duygu)\ **Replies:** 13\ **Last updated:** [October 6, 2021, 8:02am UTC](https://discuss.elastic.co/t/error-invalid-snapshot-name-snapshot-with-the-same-name-already-in-progress/283661 "2021-10-06T08:02:11Z")
Hello dear friends I have a problem. I want to store an index that is in elasticsearch. I created a new repository for this and this repository does not have any snapshots. But when I ran the code blog below, it returne… --- ## [Marvel shows sporadic indexing activity - is this correct?](https://discuss.elastic.co/t/marvel-shows-sporadic-indexing-activity-is-this-correct/38474)
**Author:** [@yehosef](https://discuss.elastic.co/u/yehosef)\ **Replies:** 11\ **Last updated:** [March 7, 2016, 5:23pm UTC](https://discuss.elastic.co/t/marvel-shows-sporadic-indexing-activity-is-this-correct/38474 "2016-03-07T17:23:35Z")
We have an indexing process that is indexing data from 4 servers each with about 10-20 processes. Each one does a bulk upload after it processes enough data. Because there are so many process, I would assume the insert… --- ## [How does heap shortage in the masters affect datanodes?](https://discuss.elastic.co/t/how-does-heap-shortage-in-the-masters-affect-datanodes/42895)
**Author:** [@thekad](https://discuss.elastic.co/u/thekad)\ **Replies:** 16\ **Last updated:** [March 1, 2016, 1:16am UTC](https://discuss.elastic.co/t/how-does-heap-shortage-in-the-masters-affect-datanodes/42895 "2016-03-01T01:16:08Z")
Hi, Versions: Ubuntu 14.04 ES 1.4.2 from elastic repos Java 1.7.0\_95 Cluster: 6 c3.8xlarge data nodes ( http://www.ec2instances.info/?filter=c3.8xlarge ) with 30G of heap configured 3 dedicated masters (originally h… --- ## [Connection pool](https://discuss.elastic.co/t/connection-pool/2422)
**Author:** [@ton](https://discuss.elastic.co/u/ton)\ **Replies:** 11\ **Last updated:** [June 15, 2015, 9:15am UTC](https://discuss.elastic.co/t/connection-pool/2422 "2015-06-15T09:15:45Z")
Hi, is there any configuration for connection pool in elastic ?, we are just moving from oracle to elastic. it seems that we get low performance as we increase the client threads. --- ## [Mapper-attachments](https://discuss.elastic.co/t/mapper-attachments/46615)
**Author:** [@AdaYang](https://discuss.elastic.co/u/AdaYang)\ **Replies:** 10\ **Last updated:** [July 29, 2016, 7:33pm UTC](https://discuss.elastic.co/t/mapper-attachments/46615 "2016-07-29T19:33:22Z")
I am trying to install mapper-attachments for es 2.3.1. if follow https://www.elastic.co/guide/en/elasticsearch/plugins/current/mapper-attachments.html it would install mapper-attachments 2.3.1 (same as es). but here Git… --- ## [Real time scrolling solution](https://discuss.elastic.co/t/real-time-scrolling-solution/140177)
**Author:** [@TameemSamawi](https://discuss.elastic.co/u/TameemSamawi)\ **Replies:** 22\ **Last updated:** [July 17, 2018, 9:20pm UTC](https://discuss.elastic.co/t/real-time-scrolling-solution/140177 "2018-07-17T21:20:04Z")
The documentation on scrolling explicitly states: Scrolling is not intended for real time user requests, but rather for processing large amounts of data, e.g. in order to reindex the contents of one index into a new in… --- ## [Tif files in fscrawler](https://discuss.elastic.co/t/tif-files-in-fscrawler/231880)
**Author:** [@avishai.d](https://discuss.elastic.co/u/avishai.d)\ **Replies:** 24\ **Last updated:** [May 25, 2020, 1:11pm UTC](https://discuss.elastic.co/t/tif-files-in-fscrawler/231880 "2020-05-25T13:11:24Z")
Hello, I'm trying to index a tif file using fscrawler and don't get any contet while PDF works fine. Please assist --- ## [\_dateparsefailure reported in tags even after date is matched](https://discuss.elastic.co/t/dateparsefailure-reported-in-tags-even-after-date-is-matched/137181)
**Author:** [@ishantanu](https://discuss.elastic.co/u/ishantanu)\ **Replies:** 17\ **Last updated:** [June 26, 2018, 5:44am UTC](https://discuss.elastic.co/t/dateparsefailure-reported-in-tags-even-after-date-is-matched/137181 "2018-06-26T05:44:28Z")
Hi, I am using date filter to convert the field to date type. Here's how the field looks like: subdata\_proc\_date: 24 Jun 2018 14:47:14,891 The date filter I've written for this is: date { match =\> \[ "subdat… --- ## [Curator throws exception when trying to delete indices based on timestamp](https://discuss.elastic.co/t/curator-throws-exception-when-trying-to-delete-indices-based-on-timestamp/113343)
**Author:** [@ikarthikb](https://discuss.elastic.co/u/ikarthikb)\ **Replies:** 17\ **Last updated:** [January 24, 2018, 10:28am UTC](https://discuss.elastic.co/t/curator-throws-exception-when-trying-to-delete-indices-based-on-timestamp/113343 "2018-01-24T10:28:32Z")
I have an actions yml file that tries to delete ES indices that are more than 5 minutes old. My ES docs contain a field called timestamp which is used to identify the records. But when curator runs, I get an exception "… --- ## [Not able to start kibana server](https://discuss.elastic.co/t/not-able-to-start-kibana-server/183116)
**Author:** [@lolcool](https://discuss.elastic.co/u/lolcool)\ **Replies:** 9\ **Last updated:** [May 29, 2019, 1:04pm UTC](https://discuss.elastic.co/t/not-able-to-start-kibana-server/183116 "2019-05-29T13:04:29Z")
I am trying to start kibana server locally. But i get this errors. My kibana and elasticsearch version match to 7.1.0 server log \[11:08:53.105\] \[error\]\[status\]\[plugin:elasticsearch@8.0.0\] Status changed from yello… --- ## [Sending logs from filebeat to redis and then logstash](https://discuss.elastic.co/t/sending-logs-from-filebeat-to-redis-and-then-logstash/132718)
**Author:** [@remo](https://discuss.elastic.co/u/remo)\ **Replies:** 9\ **Last updated:** [May 24, 2018, 9:34am UTC](https://discuss.elastic.co/t/sending-logs-from-filebeat-to-redis-and-then-logstash/132718 "2018-05-24T09:34:56Z")
I am trying to send my logs from filebeat into redis and then from redis into logstash and elasticsearch. My log file is in json format. What configuration is to be made in my filebeat.yml so that the output is redis. I… --- ## [Kibana login page (Access control)](https://discuss.elastic.co/t/kibana-login-page-access-control/190248)
**Author:** [@Rozita\_Mirmotalebi\_U](https://discuss.elastic.co/u/Rozita_Mirmotalebi_U)\ **Replies:** 17\ **Last updated:** [August 16, 2019, 8:32pm UTC](https://discuss.elastic.co/t/kibana-login-page-access-control/190248 "2019-08-16T20:32:10Z")
Hello there, I have Elasticsearch (Version 1.30.0) and Kibana (Version 3.2.3) on Rancher. I am trying to enable the login page for security purposes. I have added the x-pack configs in Kibana. Also I tied enabling (pack… --- ## [Incorrect Date Range Query Result](https://discuss.elastic.co/t/incorrect-date-range-query-result/23125)
**Author:** [@James\_Crone](https://discuss.elastic.co/u/James_Crone)\ **Replies:** 10\ **Last updated:** [April 11, 2015, 8:27am UTC](https://discuss.elastic.co/t/incorrect-date-range-query-result/23125 "2015-04-11T08:27:31Z")
Hello! My query is this: GET \_search { "query": { "bool": { "should": \[ { "range": { "DateTime": { "gt": "2015-03-01", "lte": "2015-03-0… --- ## [CURL returns immediately whereas RestClient timesout](https://discuss.elastic.co/t/curl-returns-immediately-whereas-restclient-timesout/161802)
**Author:** [@madhan3396](https://discuss.elastic.co/u/madhan3396)\ **Replies:** 17\ **Last updated:** [January 17, 2019, 2:06pm UTC](https://discuss.elastic.co/t/curl-returns-immediately-whereas-restclient-timesout/161802 "2019-01-17T14:06:32Z")
Hi, I'm using elasticsearch version 6.4. An index pri.store.size is 25GB and it contains 47 Million documents. My query includes a termsquery and cardinality. When i execute the query using CURL i got the response … --- ## [Elasticsearch 7.17.3: \[parent\] Data too large, data for \[cluster:monitor/nodes/stats\[n\]\]](https://discuss.elastic.co/t/elasticsearch-7-17-3-parent-data-too-large-data-for-cluster-monitor-nodes-stats-n/317349)
**Author:** [@alecswan](https://discuss.elastic.co/u/alecswan)\ **Replies:** 12\ **Last updated:** [November 5, 2022, 12:22am UTC](https://discuss.elastic.co/t/elasticsearch-7-17-3-parent-data-too-large-data-for-cluster-monitor-nodes-stats-n/317349 "2022-11-05T00:22:43Z")
Hello, We recently upgraded from ES 7.9.2 to 7.17.3 (in preparation for the subsequent 8.x upgrade) and noticed that the cluster spends a lot more time in Yellow state than it used to. The root cause appears to be the "… --- ## [AWS deployment](https://discuss.elastic.co/t/aws-deployment/114391)
**Author:** [@pixiuPL](https://discuss.elastic.co/u/pixiuPL)\ **Replies:** 21\ **Last updated:** [February 8, 2018, 7:26am UTC](https://discuss.elastic.co/t/aws-deployment/114391 "2018-02-08T07:26:02Z")
AWS longtime user here. Want to deploy ES into cluster. Steps to do it (both API and AMI) works well. We have our internal search app, and we need some wise-code (we do not want to see any php code) to systematize (i… --- ## [Elaticsearch Java client output dsl](https://discuss.elastic.co/t/elaticsearch-java-client-output-dsl/300952)
**Author:** [@supermario](https://discuss.elastic.co/u/supermario)\ **Replies:** 12\ **Last updated:** [March 30, 2022, 7:52am UTC](https://discuss.elastic.co/t/elaticsearch-java-client-output-dsl/300952 "2022-03-30T07:52:49Z")
I am using Elasticsearch java Client version 8.1. I want to output dsl by searchrequest, but i don't find any function. I look forward hearing your reply,thanks. --- ## [How many shards for 60GB daily index?](https://discuss.elastic.co/t/how-many-shards-for-60gb-daily-index/103159)
**Author:** [@slavik57](https://discuss.elastic.co/u/slavik57)\ **Replies:** 12\ **Last updated:** [October 26, 2017, 6:09am UTC](https://discuss.elastic.co/t/how-many-shards-for-60gb-daily-index/103159 "2017-10-26T06:09:06Z")
I am trying to configure an ELK stack and have timeouts when performing queries from kibana. After researching for a while I couldn't find a good answer to my question, how many shards should I use... We use ELK to col… --- ## [Filesystem.ignore\_types - where to configure](https://discuss.elastic.co/t/filesystem-ignore-types-where-to-configure/346514)
**Author:** [@GKre](https://discuss.elastic.co/u/GKre)\ **Replies:** 27\ **Last updated:** [June 6, 2025, 5:52pm UTC](https://discuss.elastic.co/t/filesystem-ignore-types-where-to-configure/346514 "2025-06-06T17:52:28Z")
I have installed the system integration. This is generating info about different "drives" in my devices. Unfortunately "A:" and "D:" are generating a lot of log errors as they are kind of "removable" devices. I found an… --- ## [Elasticsearch NEST Highlight](https://discuss.elastic.co/t/elasticsearch-nest-highlight/117158)
**Author:** [@Ramon\_Zaro](https://discuss.elastic.co/u/Ramon_Zaro)\ **Replies:** 10\ **Last updated:** [March 15, 2018, 2:50am UTC](https://discuss.elastic.co/t/elasticsearch-nest-highlight/117158 "2018-03-15T02:50:32Z")
Hi all, I am running an ES 5.5.0 implementation and use the NEST api in a custom .NET app. I am able to get correct highlight results while using exact word search. But after activating the full lucene query the highli… [Previous page](https://discuss.elastic.co/top.md?page=89&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=91&per_page=50&period=all)