# Top

**URL:** https://discuss.elastic.co/top.md?page=900&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 901

---

## [Hadoop and ES connectivity](https://discuss.elastic.co/t/hadoop-and-es-connectivity/139534)

<div class="topic-metadata">

**Author:** [@impu.vasudev](https://discuss.elastic.co/u/impu.vasudev)\
**Replies:** 6\
**Last updated:** [August 3, 2018, 10:54am UTC](https://discuss.elastic.co/t/hadoop-and-es-connectivity/139534 "2018-08-03T10:54:29Z")

</div>

Hi all, ES is installed in one of my node and i am running a trail version of ES but i am unable to connect it to Hadoop. My question is can we establish connectivity between ES and Hadoop in trail version.

---

## [Bulk insertion is too slow using php](https://discuss.elastic.co/t/bulk-insertion-is-too-slow-using-php/108547)

<div class="topic-metadata">

**Author:** [@shemilr](https://discuss.elastic.co/u/shemilr)\
**Replies:** 6\
**Last updated:** [November 22, 2017, 5:09am UTC](https://discuss.elastic.co/t/bulk-insertion-is-too-slow-using-php/108547 "2017-11-22T05:09:18Z")

</div>

Hi, I am creating the index using bulk insertion and mapping created before inserting the data. I have more than 20 lakhs of data with in one index and one type. After inserting the 2 of 3 lakhs of data bulk insertion b…

---

## [Input file with custom delimiter](https://discuss.elastic.co/t/input-file-with-custom-delimiter/21521)

<div class="topic-metadata">

**Author:** [@Gopimanikandan\_Sengo](https://discuss.elastic.co/u/Gopimanikandan_Sengo)\
**Replies:** 6\
**Last updated:** [January 7, 2015, 4:08pm UTC](https://discuss.elastic.co/t/input-file-with-custom-delimiter/21521 "2015-01-07T16:08:06Z")

</div>

Hi All, We are planning to load the data to elastic search from the delimited file. The file has been delimited with 0x88(ˆ) delimiter. Can you please let me know how to load the delimited file to Elastic? A…

---

## [Unable to grant an API Key, request does not contain an authorization header](https://discuss.elastic.co/t/unable-to-grant-an-api-key-request-does-not-contain-an-authorization-header/274956)

<div class="topic-metadata">

**Author:** [@Nil\_Battey\_Sannata](https://discuss.elastic.co/u/Nil_Battey_Sannata)\
**Replies:** 7\
**Last updated:** [June 5, 2021, 8:48am UTC](https://discuss.elastic.co/t/unable-to-grant-an-api-key-request-does-not-contain-an-authorization-header/274956 "2021-06-05T08:48:05Z")

</div>

I have configured the ELK SIEM in Security Onion setup but while adding new rules (security\>detection\>manage detection rules\>create new rule\> create and activate rule) I am facing subjected error- I can confirm prereq…

---

## [Open index on restore snapshot action](https://discuss.elastic.co/t/open-index-on-restore-snapshot-action/226384)

<div class="topic-metadata">

**Author:** [@Wallie](https://discuss.elastic.co/u/Wallie)\
**Replies:** 1\
**Last updated:** [April 3, 2020, 1:52pm UTC](https://discuss.elastic.co/t/open-index-on-restore-snapshot-action/226384 "2020-04-03T13:52:58Z")

</div>

Am trying to move our ELK stack to a different machine to verify backup/restore procedure. A snapshot has been created on machine A, after creating a Repository. Moved full repository directory to machine B, added the r…

---

## [Gateway timeout 504](https://discuss.elastic.co/t/gateway-timeout-504/145405)

<div class="topic-metadata">

**Author:** [@yonatan](https://discuss.elastic.co/u/yonatan)\
**Replies:** 0\
**Last updated:** [August 21, 2018, 2:09pm UTC](https://discuss.elastic.co/t/gateway-timeout-504/145405 "2018-08-21T14:09:53Z")

</div>

I updated some indices mapping to simply add a keyword field to a text property and reloaded Kibana's index patterns. I was told I should run this command at the end: POST 11ad.pi.prod.test-case-18/\_update\_by\_query?conf…

---

## [How to create mass amounts of test data in elasticsearch / Kibana](https://discuss.elastic.co/t/how-to-create-mass-amounts-of-test-data-in-elasticsearch-kibana/327637)

<div class="topic-metadata">

**Author:** [@shelby](https://discuss.elastic.co/u/shelby)\
**Replies:** 5\
**Last updated:** [March 16, 2023, 8:35am UTC](https://discuss.elastic.co/t/how-to-create-mass-amounts-of-test-data-in-elasticsearch-kibana/327637 "2023-03-16T08:35:49Z")

</div>

0 I need to test some logic I have written in Kibana (Vega scripts). For this I require quite a bit of data to generate the graphs. I am currently doing this manually with statements such as: post /metrics-hardware-xx…

---

## [Elasticsearch ingest large of data](https://discuss.elastic.co/t/elasticsearch-ingest-large-of-data/322099)

<div class="topic-metadata">

**Author:** [@m3bgwad](https://discuss.elastic.co/u/m3bgwad)\
**Replies:** 5\
**Last updated:** [December 29, 2022, 1:24pm UTC](https://discuss.elastic.co/t/elasticsearch-ingest-large-of-data/322099 "2022-12-29T13:24:47Z")

</div>

is there capability of Elasticsearch to ingest amount large of data at a rate of 300TB in the year after that archive data in offline storage? what is challenges facing me to ingest that much volume?

---

## [Older indices are not getting deleted after rollover](https://discuss.elastic.co/t/older-indices-are-not-getting-deleted-after-rollover/263953)

<div class="topic-metadata">

**Author:** [@Gokul6](https://discuss.elastic.co/u/Gokul6)\
**Replies:** 5\
**Last updated:** [February 11, 2021, 7:04am UTC](https://discuss.elastic.co/t/older-indices-are-not-getting-deleted-after-rollover/263953 "2021-02-11T07:04:10Z")

</div>

i did the following steps created an ilm policy. created an index template and attached the ilm policy to it. finally created an index using create index API. when i checked the index under index management section in…

---

## [Consume data from sharded rabbitmq queue #2](https://discuss.elastic.co/t/consume-data-from-sharded-rabbitmq-queue-2/172178)

<div class="topic-metadata">

**Author:** [@lsdev14](https://discuss.elastic.co/u/lsdev14)\
**Replies:** 5\
**Last updated:** [March 16, 2019, 1:27am UTC](https://discuss.elastic.co/t/consume-data-from-sharded-rabbitmq-queue-2/172178 "2019-03-16T01:27:44Z")

</div>

I'm testing the rabbitmq-sharding plugin https://github.com/rabbitmq/rabbitmq-sharding I created a test scenario based in this question https://discuss.elastic.co/t/consume-data-from-sharded-rabbitmq-queue/130248 In re…

---

## [GC not working](https://discuss.elastic.co/t/gc-not-working/54160)

<div class="topic-metadata">

**Author:** [@esamudio](https://discuss.elastic.co/u/esamudio)\
**Replies:** 5\
**Last updated:** [June 29, 2016, 8:31am UTC](https://discuss.elastic.co/t/gc-not-working/54160 "2016-06-29T08:31:41Z")

</div>

I've been having a lot of problems dealing with the GC on my cluster. It always reaches a point where the heap is filled up, the GC doesn't evict data and my nodes become unresponsive. I've tried many different things to…

---

## [Strange shard counts](https://discuss.elastic.co/t/strange-shard-counts/20899)

<div class="topic-metadata">

**Author:** [@Jingzhao\_Ou](https://discuss.elastic.co/u/Jingzhao_Ou)\
**Replies:** 5\
**Last updated:** [November 23, 2014, 6:58pm UTC](https://discuss.elastic.co/t/strange-shard-counts/20899 "2014-11-23T18:58:57Z")

</div>

Hi, I checked the index stats by visiting http://localhost:9200/raw/\_stats?pretty { "\_shards" : { "total" : 10, "successful" : 5, "failed" : 0 }, There are totally 10 shards, 5 successfu…

---

## [KQL Query Date filter on non timeseries data](https://discuss.elastic.co/t/kql-query-date-filter-on-non-timeseries-data/321839)

<div class="topic-metadata">

**Author:** [@Mark\_Rodman](https://discuss.elastic.co/u/Mark_Rodman)\
**Replies:** 4\
**Last updated:** [January 9, 2023, 10:44am UTC](https://discuss.elastic.co/t/kql-query-date-filter-on-non-timeseries-data/321839 "2023-01-09T10:44:56Z")

</div>

Hi, I'm tying to use Lens to plot data changing over a period of time. We generate the data once a week at single point in time, and so it doesn't look good as a time series. We also want to plot the count of a data …

---

## [Could not set the passworkd after enable the security](https://discuss.elastic.co/t/could-not-set-the-passworkd-after-enable-the-security/308967)

<div class="topic-metadata">

**Author:** [@ericsoul](https://discuss.elastic.co/u/ericsoul)\
**Replies:** 4\
**Last updated:** [July 6, 2022, 7:38am UTC](https://discuss.elastic.co/t/could-not-set-the-passworkd-after-enable-the-security/308967 "2022-07-06T07:38:37Z")

</div>

ElasticSearch version:7.12 After enable the xpack security with the guide： To set password, then get the error: bin/elasticsearch-setup-passwords interactive future versions of Elasticsearch will require Java 11; you…

---

## [Timelion 7.10 Error : Syntax Error](https://discuss.elastic.co/t/timelion-7-10-error-syntax-error/256016)

<div class="topic-metadata">

**Author:** [@ManuelF](https://discuss.elastic.co/u/ManuelF)\
**Replies:** 4\
**Last updated:** [November 25, 2020, 3:31pm UTC](https://discuss.elastic.co/t/timelion-7-10-error-syntax-error/256016 "2020-11-25T15:31:04Z")

</div>

Hi, Recently upgraded ELK to try v7.10. I am getting an error in Timelion: Timelion request error: undefined SyntaxError: {"type":"incompleteFunction","function":"es","location":{"min":0,"max":3},"text":".es"} This…

---

## [Consul discovery plugin?](https://discuss.elastic.co/t/consul-discovery-plugin/215960)

<div class="topic-metadata">

**Author:** [@rgarrigue](https://discuss.elastic.co/u/rgarrigue)\
**Replies:** 4\
**Last updated:** [January 22, 2020, 12:31pm UTC](https://discuss.elastic.co/t/consul-discovery-plugin/215960 "2020-01-22T12:31:57Z")

</div>

Hi there I'm wondering if there's any plan for a discovery plugin based on Consul ? Best regards, Rémy

---

## [Filebeat unable to send data to elastic search](https://discuss.elastic.co/t/filebeat-unable-to-send-data-to-elastic-search/67708)

<div class="topic-metadata">

**Author:** [@asparadkar](https://discuss.elastic.co/u/asparadkar)\
**Replies:** 4\
**Last updated:** [December 1, 2016, 12:53pm UTC](https://discuss.elastic.co/t/filebeat-unable-to-send-data-to-elastic-search/67708 "2016-12-01T12:53:47Z")

</div>

I'm trying to send a file using filebeat. When i start filebeat, it starts the harvester for the file and then gives the following error I sent a file yesterday the exact same way and it was sent successfully.

---

## [Not able to escape special characters](https://discuss.elastic.co/t/not-able-to-escape-special-characters/120616)

<div class="topic-metadata">

**Author:** [@liammcc](https://discuss.elastic.co/u/liammcc)\
**Replies:** 1\
**Last updated:** [February 20, 2018, 11:29am UTC](https://discuss.elastic.co/t/not-able-to-escape-special-characters/120616 "2018-02-20T11:29:54Z")

</div>

So we have elasticsearch set up on AWS with KIbana and we are trying to do post requests to the elasticsearch endpoint to retrieve certain errors in logs. However some of the messages in our logs have the word error in b…

---

## [Kibana Shows No Data Found](https://discuss.elastic.co/t/kibana-shows-no-data-found/71486)

<div class="topic-metadata">

**Author:** [@prakash1243](https://discuss.elastic.co/u/prakash1243)\
**Replies:** 1\
**Last updated:** [January 13, 2017, 10:44am UTC](https://discuss.elastic.co/t/kibana-shows-no-data-found/71486 "2017-01-13T10:44:28Z")

</div>

Hi - I have the Metric beat running on a couple of windows server. And my Elastic Search and Kibana is configured in a different VM Windows server on the same domain. Metric beat is successfully sending the data to th…

---

## [Why install and configure elasticsearch, kibana , and logstash, for logging mikrotik?](https://discuss.elastic.co/t/why-install-and-configure-elasticsearch-kibana-and-logstash-for-logging-mikrotik/59772)

<div class="topic-metadata">

**Author:** [@Amryan\_18](https://discuss.elastic.co/u/Amryan_18)\
**Replies:** 1\
**Last updated:** [September 5, 2016, 3:29am UTC](https://discuss.elastic.co/t/why-install-and-configure-elasticsearch-kibana-and-logstash-for-logging-mikrotik/59772 "2016-09-05T03:29:16Z")

</div>

Can elasticsearch , Kibana and logstash take or pull data logging of proxy . ? if you can like where way configuration. ? please explain . ? Thank you very much

---

## [Deleting old records from ES](https://discuss.elastic.co/t/deleting-old-records-from-es/17260)

<div class="topic-metadata">

**Author:** [@Abrar\_Sheikh](https://discuss.elastic.co/u/Abrar_Sheikh)\
**Replies:** 1\
**Last updated:** [April 29, 2014, 1:35pm UTC](https://discuss.elastic.co/t/deleting-old-records-from-es/17260 "2014-04-29T13:35:45Z")

</div>

Hi, I would what to know how to rotate old records from ES index, coz when i delete documents with delete query API it does not free up disk space. Eg. i want to remove records older than 3 days in my index. For m…

---

## [%iowait growing with index size](https://discuss.elastic.co/t/iowait-growing-with-index-size/14515)

<div class="topic-metadata">

**Author:** [@slimsuperhero](https://discuss.elastic.co/u/slimsuperhero)\
**Replies:** 1\
**Last updated:** [November 22, 2013, 7:30pm UTC](https://discuss.elastic.co/t/iowait-growing-with-index-size/14515 "2013-11-22T19:30:45Z")

</div>

Hello, we need the help of community. We have two nodes ElasticSearch cluster setup. We are indexing ~10k docs per second (nginx access log entries, actually). New index is created every day at 4 AM (local time).…

---

## [Deleting a specific mapping/property within an index](https://discuss.elastic.co/t/deleting-a-specific-mapping-property-within-an-index/9082)

<div class="topic-metadata">

**Author:** [@coys](https://discuss.elastic.co/u/coys)\
**Replies:** 1\
**Last updated:** [September 24, 2012, 3:45pm UTC](https://discuss.elastic.co/t/deleting-a-specific-mapping-property-within-an-index/9082 "2012-09-24T15:45:58Z")

</div>

Hi, I've indexed some of my documents and built an index, some of the properties are for e.g. "ownership" : { "dynamic" : "true", "properties" : { "author" : { "type" : "string…

---

## [Filebeat fail to start](https://discuss.elastic.co/t/filebeat-fail-to-start/111305)

<div class="topic-metadata">

**Author:** [@teejayuu](https://discuss.elastic.co/u/teejayuu)\
**Replies:** 2\
**Last updated:** [December 12, 2017, 11:03am UTC](https://discuss.elastic.co/t/filebeat-fail-to-start/111305 "2017-12-12T11:03:45Z")

</div>

Trying to ingest IIS logs to logstash. Have installed filebeat 5.3.2 on an IIS server and modified filebeat.yml as below: ###################### Filebeat Configuration Example ######################### # This file is …

---

## [Not able to connect elastic search server remotly](https://discuss.elastic.co/t/not-able-to-connect-elastic-search-server-remotly/99423)

<div class="topic-metadata">

**Author:** [@gauravgarg](https://discuss.elastic.co/u/gauravgarg)\
**Replies:** 2\
**Last updated:** [September 5, 2017, 1:05pm UTC](https://discuss.elastic.co/t/not-able-to-connect-elastic-search-server-remotly/99423 "2017-09-05T13:05:54Z")

</div>

Hi Team, I am not able to connect to elastic-search server remotely from another machine. my ES configuration on server side is: on my elastic search server: /etc/elasticsearch/elasticsearch.yml cluster.name: elastic…

---

## [Visualization for multiple plots in Kibana with filters](https://discuss.elastic.co/t/visualization-for-multiple-plots-in-kibana-with-filters/87450)

<div class="topic-metadata">

**Author:** [@Ken\_Liao](https://discuss.elastic.co/u/Ken_Liao)\
**Replies:** 2\
**Last updated:** [June 2, 2017, 10:05am UTC](https://discuss.elastic.co/t/visualization-for-multiple-plots-in-kibana-with-filters/87450 "2017-06-02T10:05:36Z")

</div>

I am trying to achieve the following on Kibana: I would like to plot two plots on the same graph with the following data structures A: "\_source": { "@timestamp": "2017-05-21T05:14:36.277", "topic\_name": "/topic…

---

## [(apache spark df).saveToES(elastic search)](https://discuss.elastic.co/t/apache-spark-df-savetoes-elastic-search/74765)

<div class="topic-metadata">

**Author:** [@Muthu\_Jayakumar](https://discuss.elastic.co/u/Muthu_Jayakumar)\
**Replies:** 2\
**Last updated:** [February 26, 2017, 4:43pm UTC](https://discuss.elastic.co/t/apache-spark-df-savetoes-elastic-search/74765 "2017-02-26T16:43:21Z")

</div>

Hello there, I am new to elastic-search + apache-spark combination. I have a question on how I would be able to set datatypes in ElasticSearch for a dataframe I would be saving? For example, when I take a dataframe to …

---

## [Create watcher from visualization of saved search](https://discuss.elastic.co/t/create-watcher-from-visualization-of-saved-search/165940)

<div class="topic-metadata">

**Author:** [@justinw](https://discuss.elastic.co/u/justinw)\
**Replies:** 3\
**Last updated:** [January 29, 2019, 12:49pm UTC](https://discuss.elastic.co/t/create-watcher-from-visualization-of-saved-search/165940 "2019-01-29T12:49:36Z")

</div>

Hi, Is there a way to create a watcher threshold alert from a visualization, say, a line graph? Our query has quite a few filters, so it'd be convenient to be able to re-use the logic baked into a viz to generate the j…

---

## [How can I have my Kibana server talk with my Elastic server in Kubernetes environment?](https://discuss.elastic.co/t/how-can-i-have-my-kibana-server-talk-with-my-elastic-server-in-kubernetes-environment/164911)

<div class="topic-metadata">

**Author:** [@Riduidel](https://discuss.elastic.co/u/Riduidel)\
**Replies:** 3\
**Last updated:** [January 21, 2019, 5:56pm UTC](https://discuss.elastic.co/t/how-can-i-have-my-kibana-server-talk-with-my-elastic-server-in-kubernetes-environment/164911 "2019-01-21T17:56:49Z")

</div>

I've already asked this question on StackOverflow, but let me paraphrase it I'm trying to deploy Elastic and Kibana in a Kubernetes cluster. I have installed Elastic using Helm chart : helm repo add elastic https://h…

---

## [Logstash JDBC with Docker not loaded](https://discuss.elastic.co/t/logstash-jdbc-with-docker-not-loaded/142325)

<div class="topic-metadata">

**Author:** [@Ragnar](https://discuss.elastic.co/u/Ragnar)\
**Replies:** 0\
**Last updated:** [July 31, 2018, 9:33am UTC](https://discuss.elastic.co/t/logstash-jdbc-with-docker-not-loaded/142325 "2018-07-31T09:33:18Z")

</div>

Build an Elastic stack where I have to connect to a MSSQL Database. So I build my own Logstash image where I import the JDBC driver to the container. FROM docker.elastic.co/logstash/logstash:6.3.0 USER root COPY mssql-j…

---

## [Starting Kibana in dev mode in Windows not working](https://discuss.elastic.co/t/starting-kibana-in-dev-mode-in-windows-not-working/96415)

<div class="topic-metadata">

**Author:** [@Prachi\_Mishra](https://discuss.elastic.co/u/Prachi_Mishra)\
**Replies:** 3\
**Last updated:** [August 10, 2017, 7:58pm UTC](https://discuss.elastic.co/t/starting-kibana-in-dev-mode-in-windows-not-working/96415 "2017-08-10T19:58:01Z")

</div>

In my local I have ELK Stack(5.4.3) Installed and its working fine . On top of it I want to add some functionality so I am trying to do plugin development for the same. I pulled the source code from https://github.com/…

---

## [Date match failure failure with given format](https://discuss.elastic.co/t/date-match-failure-failure-with-given-format/84890)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 3\
**Last updated:** [May 8, 2017, 10:54am UTC](https://discuss.elastic.co/t/date-match-failure-failure-with-given-format/84890 "2017-05-08T10:54:47Z")

</div>

Hi, I am getting below error in ES logs. This is related to the match failure. I don't how it appears in ES? \[2017-05-08 10:30:19,469\]\[WARN \]\[indices.cluster \] \[data-node-3\] \[\[esb-2017.05.08\]\[0\]\] marking and…

---

## [Errors with geo\_point](https://discuss.elastic.co/t/errors-with-geo-point/60904)

<div class="topic-metadata">

**Author:** [@ThomasBorno](https://discuss.elastic.co/u/ThomasBorno)\
**Replies:** 3\
**Last updated:** [September 20, 2016, 7:44am UTC](https://discuss.elastic.co/t/errors-with-geo-point/60904 "2016-09-20T07:44:32Z")

</div>

Hey, I'm new to this platform. Been using ELK since last week. I'm encountering several problems concerning geo localisations. I have a CSV which is made out of the following Name,Adress,Latitude,Longitude I have…

---

## [Parent-child highlighting](https://discuss.elastic.co/t/parent-child-highlighting/7698)

<div class="topic-metadata">

**Author:** [@nmz](https://discuss.elastic.co/u/nmz)\
**Replies:** 3\
**Last updated:** [June 22, 2016, 9:23am UTC](https://discuss.elastic.co/t/parent-child-highlighting/7698 "2016-06-22T09:23:27Z")

</div>

In a parent, child doc mapping, is it possible to highlight the matches in the child document?

---

## [Dec 10th, 2023: \[EN\] Ensuring compatibility with two Elasticsearch versions (or more) in automated tests](https://discuss.elastic.co/t/dec-10th-2023-en-ensuring-compatibility-with-two-elasticsearch-versions-or-more-in-automated-tests/348229)

<div class="topic-metadata">

**Author:** [@piotrprz](https://discuss.elastic.co/u/piotrprz)\
**Replies:** 0\
**Last updated:** [December 10, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-10th-2023-en-ensuring-compatibility-with-two-elasticsearch-versions-or-more-in-automated-tests/348229 "2023-12-10T08:00:11Z")

</div>

Upgrades of key dependencies can be tedious and scary. What if your system won’t work, because we haven’t tested one of the key flows? To avoid that we test our systems in staging, but that takes time and effort. Resu…

---

## [If else query on elastic search](https://discuss.elastic.co/t/if-else-query-on-elastic-search/302663)

<div class="topic-metadata">

**Author:** [@anime\_lover](https://discuss.elastic.co/u/anime_lover)\
**Replies:** 0\
**Last updated:** [April 19, 2022, 4:48am UTC](https://discuss.elastic.co/t/if-else-query-on-elastic-search/302663 "2022-04-19T04:48:08Z")

</div>

Hi there , i am facing some problem on searching . My problem is : Suppose i have three field A,B and C . If i search for certain text then it should search on field A first if found ,stop searching and return result i…

---

## [APM The selected trace cannot be found after 7.17.1 -\> 8.1 upgrade](https://discuss.elastic.co/t/apm-the-selected-trace-cannot-be-found-after-7-17-1-8-1-upgrade/299964)

<div class="topic-metadata">

**Author:** [@edwardcccc](https://discuss.elastic.co/u/edwardcccc)\
**Replies:** 2\
**Last updated:** [March 21, 2022, 2:46pm UTC](https://discuss.elastic.co/t/apm-the-selected-trace-cannot-be-found-after-7-17-1-8-1-upgrade/299964 "2022-03-21T14:46:16Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: Doc…

---

## [Free text search with App Search/Elastic Search UI with string , AND/ OR options?](https://discuss.elastic.co/t/free-text-search-with-app-search-elastic-search-ui-with-string-and-or-options/343026)

<div class="topic-metadata">

**Author:** [@thomas-ld](https://discuss.elastic.co/u/thomas-ld)\
**Replies:** 6\
**Last updated:** [September 14, 2023, 3:09pm UTC](https://discuss.elastic.co/t/free-text-search-with-app-search-elastic-search-ui-with-string-and-or-options/343026 "2023-09-14T15:09:55Z")

</div>

Does Elastic AppSearch/UISearch support implementing free text search on large text fields ? I would like to use ElasticSearchUI / SearchBox with option to search like: "whale was seen in" + houston - dalas I.e. use "…

---

## [Winlogbeat not able to send log to the logstash](https://discuss.elastic.co/t/winlogbeat-not-able-to-send-log-to-the-logstash/230833)

<div class="topic-metadata">

**Author:** [@srv95](https://discuss.elastic.co/u/srv95)\
**Replies:** 7\
**Last updated:** [May 3, 2020, 7:35pm UTC](https://discuss.elastic.co/t/winlogbeat-not-able-to-send-log-to-the-logstash/230833 "2020-05-03T19:35:27Z")

</div>

emstats":{"gc\_next":57446288,"memory\_alloc":28758904,"memory\_total":636265600},"runtime":{"goroutines":28}},"libbeat":{"config":{"module":{"running":0}},"output":{"read":{"errors":1},"write":{"bytes":124}},"pipeline":{"c…

---

## [Questions about documents and indices](https://discuss.elastic.co/t/questions-about-documents-and-indices/170456)

<div class="topic-metadata">

**Author:** [@KOTOXJle6](https://discuss.elastic.co/u/KOTOXJle6)\
**Replies:** 7\
**Last updated:** [March 1, 2019, 1:38pm UTC](https://discuss.elastic.co/t/questions-about-documents-and-indices/170456 "2019-03-01T13:38:49Z")

</div>

Hello! Yesterday I set up my cluster from one node and noticed that several irrelevant indexes and ~5 million documents are displayed in Kibana monitoring. I removed the excess indexes, but the number of documents has…

---

## [Skip mapper\_parsing\_exception on remote reindex](https://discuss.elastic.co/t/skip-mapper-parsing-exception-on-remote-reindex/84595)

<div class="topic-metadata">

**Author:** [@Dmitry\_Shmelev](https://discuss.elastic.co/u/Dmitry_Shmelev)\
**Replies:** 1\
**Last updated:** [May 4, 2017, 4:46pm UTC](https://discuss.elastic.co/t/skip-mapper-parsing-exception-on-remote-reindex/84595 "2017-05-04T16:46:06Z")

</div>

Hi, I migrate my index from ES 1.7.5 to 5.3.0 using \_reindex with remote. This index contains multiple types and has multiple mapping. I split this index by type and copy one mapping from old (logstash-2016.02.16) to …

---

## [Elastic OpenAI Connector Local LLM](https://discuss.elastic.co/t/elastic-openai-connector-local-llm/375228)

<div class="topic-metadata">

**Author:** [@marmai16](https://discuss.elastic.co/u/marmai16)\
**Replies:** 3\
**Last updated:** [March 28, 2025, 6:53pm UTC](https://discuss.elastic.co/t/elastic-openai-connector-local-llm/375228 "2025-03-28T18:53:58Z")

</div>

Hello everyone, i have an elastic instance where i try to set up a custom OpenAI connector to a machine with a locally hosted LLM to use within the AI Assistant. Since 8.17 it is possible to use an OpenAI compatible API…

---

## [Logstash - How can i get the data from a key-value pair?](https://discuss.elastic.co/t/logstash-how-can-i-get-the-data-from-a-key-value-pair/263134)

<div class="topic-metadata">

**Author:** [@vinodhini](https://discuss.elastic.co/u/vinodhini)\
**Replies:** 2\
**Last updated:** [February 3, 2021, 6:00pm UTC](https://discuss.elastic.co/t/logstash-how-can-i-get-the-data-from-a-key-value-pair/263134 "2021-02-03T18:00:38Z")

</div>

I have a field which is like "host":{"name":"abcdef"}, How can i get the value "abcdef" alone from the host field? gsub is not allowing me to remove the {} or "name": I tried to get the value by referencing as %{host}{n…

---

## [Is it possible to register multiple snapshot repositories for the same S3 bucket?](https://discuss.elastic.co/t/is-it-possible-to-register-multiple-snapshot-repositories-for-the-same-s3-bucket/250948)

<div class="topic-metadata">

**Author:** [@aliservetdonmez](https://discuss.elastic.co/u/aliservetdonmez)\
**Replies:** 4\
**Last updated:** [October 5, 2020, 10:54am UTC](https://discuss.elastic.co/t/is-it-possible-to-register-multiple-snapshot-repositories-for-the-same-s3-bucket/250948 "2020-10-05T10:54:44Z")

</div>

I'd like to create separate snapshot repositories for each major Elasticsearch version, however I don't necessarily want to create separate backing S3 buckets, for storage. Is it okay/possible using the same bucket for …

---

## [ELasticsearch initial master nodes using DNS](https://discuss.elastic.co/t/elasticsearch-initial-master-nodes-using-dns/226733)

<div class="topic-metadata">

**Author:** [@kmroz](https://discuss.elastic.co/u/kmroz)\
**Replies:** 4\
**Last updated:** [April 6, 2020, 3:08pm UTC](https://discuss.elastic.co/t/elasticsearch-initial-master-nodes-using-dns/226733 "2020-04-06T15:08:25Z")

</div>

Hello, Trying to setup a new Elastic Cluster with the latest and greatest version. I tried configuring the list to use hostnames and IP addresses can change. It seems ES doesnt like it when I use DNS. Is there another w…

---

## [How do you preregister a search template with conditional clauses?](https://discuss.elastic.co/t/how-do-you-preregister-a-search-template-with-conditional-clauses/135768)

<div class="topic-metadata">

**Author:** [@ashokc](https://discuss.elastic.co/u/ashokc)\
**Replies:** 4\
**Last updated:** [June 14, 2018, 6:53am UTC](https://discuss.elastic.co/t/how-do-you-preregister-a-search-template-with-conditional-clauses/135768 "2018-06-14T06:53:17Z")

</div>

We use mustache search templates that have conditional clauses (those # symbols). Worked fine in 5.x when we could simply dump them to config/scripts folder... and ES would reload them pretty quick Does not look like th…

---

## [Using variables in fields output](https://discuss.elastic.co/t/using-variables-in-fields-output/69559)

<div class="topic-metadata">

**Author:** [@Sai\_Theodore](https://discuss.elastic.co/u/Sai_Theodore)\
**Replies:** 4\
**Last updated:** [December 22, 2016, 4:14am UTC](https://discuss.elastic.co/t/using-variables-in-fields-output/69559 "2016-12-22T04:14:18Z")

</div>

I need to pass a field from filebeat to kafka viz. host which is nothing but the host name of the machine from the logs are read. Though Filebeat sends the hostname in the beat properties, I need this in a separate field…

---

## [Need to know Topbeat & Filebeat using which protocol & which port number should be open to deploy filebeat & topbeat on linux server](https://discuss.elastic.co/t/need-to-know-topbeat-filebeat-using-which-protocol-which-port-number-should-be-open-to-deploy-filebeat-topbeat-on-linux-server/68828)

<div class="topic-metadata">

**Author:** [@priti](https://discuss.elastic.co/u/priti)\
**Replies:** 4\
**Last updated:** [December 13, 2016, 11:40am UTC](https://discuss.elastic.co/t/need-to-know-topbeat-filebeat-using-which-protocol-which-port-number-should-be-open-to-deploy-filebeat-topbeat-on-linux-server/68828 "2016-12-13T11:40:12Z")

</div>

Need to know Topbeat & Filebeat using which protocol & which port number should be open to deploy filebeat & topbeat on linux server

---

## [Is it possible to make 'elasticsearch index capped'?](https://discuss.elastic.co/t/is-it-possible-to-make-elasticsearch-index-capped/52593)

<div class="topic-metadata">

**Author:** [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Replies:** 4\
**Last updated:** [June 14, 2016, 4:11am UTC](https://discuss.elastic.co/t/is-it-possible-to-make-elasticsearch-index-capped/52593 "2016-06-14T04:11:49Z")

</div>

Hi all, I have 20G storage for elasticsearch storing data, I don't really care the importance of these data (e.g. log data), so is it possible to make 'elasticsearch index capped' like 'mongo capped collection'? Any …

---

## [Extract information from text and add as value to new field using grok and regular expression](https://discuss.elastic.co/t/extract-information-from-text-and-add-as-value-to-new-field-using-grok-and-regular-expression/55269)

<div class="topic-metadata">

**Author:** [@Tyngd\_Punkt](https://discuss.elastic.co/u/Tyngd_Punkt)\
**Replies:** 2\
**Last updated:** [July 12, 2016, 8:45am UTC](https://discuss.elastic.co/t/extract-information-from-text-and-add-as-value-to-new-field-using-grok-and-regular-expression/55269 "2016-07-12T08:45:18Z")

</div>

Hello, I'm a total newbie. I monitor a twitter feed using ELK. I want to be able to visualize in Kibana based on CVE numbers. I have been trying to use grok to add a new filed containing only a CVE number if it can be …

[Previous page](https://discuss.elastic.co/top.md?page=899&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=901&per_page=50&period=all)
