# Top **URL:** https://discuss.elastic.co/top.md?page=908&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 909 --- ## [Error on installation process](https://discuss.elastic.co/t/error-on-installation-process/128447)
**Author:** [@kuruzuke](https://discuss.elastic.co/u/kuruzuke)\ **Replies:** 1\ **Last updated:** [April 18, 2018, 7:40am UTC](https://discuss.elastic.co/t/error-on-installation-process/128447 "2018-04-18T07:40:57Z")
version : elasticsearch-6.2.3.msi \*\*\*\*\*\*\* Product: C:\\Users\\Administrator\\Downloads\\elasticsearch-6.2.3.msi \*\*\*\*\*\*\* Action: INSTALL \*\*\*\*\*\*\* CommandLine: \*\*\*\*\*\*\*\*\*\* MSI (s) (FC:8C) \[11:22:49:469\]: M… --- ## [Filebeat and Logstash connection refused error](https://discuss.elastic.co/t/filebeat-and-logstash-connection-refused-error/94862)
**Author:** [@SandhyaRani](https://discuss.elastic.co/u/SandhyaRani)\ **Replies:** 1\ **Last updated:** [July 28, 2017, 2:39am UTC](https://discuss.elastic.co/t/filebeat-and-logstash-connection-refused-error/94862 "2017-07-28T02:39:30Z")
Hi ! I am trying to send the logs to logstash using filebeats I'm getting this error I ran the commands : 1) sudo /etc/init.d/filebeat start and then after I ran 2) ./filebeat -e -v -c filebeat.yml 2017/07/27… --- ## [Search thread pools not released](https://discuss.elastic.co/t/search-thread-pools-not-released/18495)
**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\ **Replies:** 7\ **Last updated:** [April 15, 2016, 6:59pm UTC](https://discuss.elastic.co/t/search-thread-pools-not-released/18495 "2016-04-15T18:59:33Z")
Having an issue on one of my clusters running version 1.1.1 with 8 master/data nodes, unicast, connecting via the Java TransportClient. A few REST queries are executed via monitoring services. Currently there is alm… --- ## [Two nodes cluster in 2.1.1 fails for high availability](https://discuss.elastic.co/t/two-nodes-cluster-in-2-1-1-fails-for-high-availability/42288)
**Author:** [@chalapathi](https://discuss.elastic.co/u/chalapathi)\ **Replies:** 7\ **Last updated:** [February 22, 2016, 9:14am UTC](https://discuss.elastic.co/t/two-nodes-cluster-in-2-1-1-fails-for-high-availability/42288 "2016-02-22T09:14:23Z")
Hi, below is my elasticsearch configuration settings for each node on my cluster. cluster.name: hits node.name: "node1" node.master: true node.data: true network.host: 127.11.11.1 http.port : 9210 transport.tcp.port … --- ## [Error with embedded server and tokenizer: edge\_ngram](https://discuss.elastic.co/t/error-with-embedded-server-and-tokenizer-edge-ngram/241726)
**Author:** [@Emanuel\_Velzi](https://discuss.elastic.co/u/Emanuel_Velzi)\ **Replies:** 6\ **Last updated:** [July 20, 2020, 12:47pm UTC](https://discuss.elastic.co/t/error-with-embedded-server-and-tokenizer-edge-ngram/241726 "2020-07-20T12:47:42Z")
Hi, I'm making integration testing with the RestHighLevelClient (ES v7.8). I'm starting an embedded server with the hack described here: When I try to create an index with this settings, I am facing an error. Code: … --- ## [Trouble with conditionals in aggregate filter](https://discuss.elastic.co/t/trouble-with-conditionals-in-aggregate-filter/191910)
**Author:** [@N\_Antech](https://discuss.elastic.co/u/N_Antech)\ **Replies:** 6\ **Last updated:** [July 23, 2019, 11:09pm UTC](https://discuss.elastic.co/t/trouble-with-conditionals-in-aggregate-filter/191910 "2019-07-23T23:09:04Z")
I am working to pull my data into elasticsearch using logstash and running into some trouble. I'll do my best to explain the situation: I'm pulling data via jdbc and everything seems to be working with the exception of… --- ## [Docs count in elasticsearch and hits in kibana don't match](https://discuss.elastic.co/t/docs-count-in-elasticsearch-and-hits-in-kibana-dont-match/50233)
**Author:** [@nkapur](https://discuss.elastic.co/u/nkapur)\ **Replies:** 2\ **Last updated:** [May 17, 2016, 4:07pm UTC](https://discuss.elastic.co/t/docs-count-in-elasticsearch-and-hits-in-kibana-dont-match/50233 "2016-05-17T16:07:40Z")
I just started using elasticsearch and kibana this week. Here is the document count of my index (day based): -\> curl localhost:9200/\_cat/indices/squid-2016.05.15\*?v health status index pri rep docs.count docs.deleted … --- ## [PKI security realm lisence](https://discuss.elastic.co/t/pki-security-realm-lisence/273392)
**Author:** [@Armen\_Petrosyan](https://discuss.elastic.co/u/Armen_Petrosyan)\ **Replies:** 8\ **Last updated:** [May 21, 2021, 6:17am UTC](https://discuss.elastic.co/t/pki-security-realm-lisence/273392 "2021-05-21T06:17:18Z")
In subscription page Subscriptions | Elastic Stack Products & Support | Elastic Stated that Encrypted communications is under basic subscription. However when I defined pki real for client authentication, it didn't wor… --- ## [Elasticsearch 6.0.0-rc2 - Searches take a long time to run; sometimes timeout](https://discuss.elastic.co/t/elasticsearch-6-0-0-rc2-searches-take-a-long-time-to-run-sometimes-timeout/107352)
**Author:** [@pcnc](https://discuss.elastic.co/u/pcnc)\ **Replies:** 8\ **Last updated:** [November 21, 2017, 10:48am UTC](https://discuss.elastic.co/t/elasticsearch-6-0-0-rc2-searches-take-a-long-time-to-run-sometimes-timeout/107352 "2017-11-21T10:48:29Z")
Hello, We're using Elasticsearch (6.0.0-rc2) in conjunction with Kibana, and have noticed that queries take a much longer time to run. Has anything changed regarding index mappings from Elasticsearch 5.5 to 6.0.0-rc2? … --- ## [Need help on Logstash server](https://discuss.elastic.co/t/need-help-on-logstash-server/49169)
**Author:** [@vmankala](https://discuss.elastic.co/u/vmankala)\ **Replies:** 8\ **Last updated:** [May 6, 2016, 12:53pm UTC](https://discuss.elastic.co/t/need-help-on-logstash-server/49169 "2016-05-06T12:53:40Z")
I have installed filebeat on 172-31-0-204 and logstash on 172-31-0-207. I created the ES domain in AWS and gave that domain in logstash config file on 172-31-0-207. The issue is when I give below command in logstash serv… --- ## [Dynamic-Template Errors After Upgrading to ES 6.8](https://discuss.elastic.co/t/dynamic-template-errors-after-upgrading-to-es-6-8/200771)
**Author:** [@elasticTrouble](https://discuss.elastic.co/u/elasticTrouble)\ **Replies:** 3\ **Last updated:** [September 25, 2019, 5:13pm UTC](https://discuss.elastic.co/t/dynamic-template-errors-after-upgrading-to-es-6-8/200771 "2019-09-25T17:13:53Z")
Evening ES. I'm having some trouble successfully indexing certain events after migrating / upgrading to ES 6.8 from 5.3. I believe the root cause of the error I'm experiencing is due to an improper mapping on one of the … --- ## [How to read binary files using logstash](https://discuss.elastic.co/t/how-to-read-binary-files-using-logstash/78667)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 3\ **Last updated:** [March 15, 2017, 11:08am UTC](https://discuss.elastic.co/t/how-to-read-binary-files-using-logstash/78667 "2017-03-15T11:08:05Z")
Hi, Is there any way to read binary files and parse it to text using ELK stack? br, Sunil --- ## [Unable to Index: Elasticsearch 2.3.0:Windows 10](https://discuss.elastic.co/t/unable-to-index-elasticsearch-2-3-0-windows-10/46246)
**Author:** [@seeni](https://discuss.elastic.co/u/seeni)\ **Replies:** 3\ **Last updated:** [April 7, 2016, 3:24am UTC](https://discuss.elastic.co/t/unable-to-index-elasticsearch-2-3-0-windows-10/46246 "2016-04-07T03:24:00Z")
Hi , I am unable to do -XPUT. please guide me on how I can do it.. below is the screenshot of the error message. C:\>curl -XPUT "localhost:9200/megacorp/employee/1" { "first\_name" : "John", "last\_name" : "Smith", "age… --- ## [Can we customize kibana 4?](https://discuss.elastic.co/t/can-we-customize-kibana-4/26772)
**Author:** [@Anmol\_Gupta](https://discuss.elastic.co/u/Anmol_Gupta)\ **Replies:** 3\ **Last updated:** [August 4, 2015, 6:55am UTC](https://discuss.elastic.co/t/can-we-customize-kibana-4/26772 "2015-08-04T06:55:53Z")
Is it possible to customize kibana 4 for using it according to my need ?? --- ## [Unable to load CSV file into Elasticsearch](https://discuss.elastic.co/t/unable-to-load-csv-file-into-elasticsearch/198826)
**Author:** [@Ramya\_Tanikanti](https://discuss.elastic.co/u/Ramya_Tanikanti)\ **Replies:** 5\ **Last updated:** [September 11, 2019, 4:10am UTC](https://discuss.elastic.co/t/unable-to-load-csv-file-into-elasticsearch/198826 "2019-09-11T04:10:53Z")
Hi, Logstash uploads the data into Kibana once and sometimes it doesn't even though I use the same same config file. I use the same config file to load the same data again after deleting the index it created in Kibana … --- ## [Concurrency control of Update](https://discuss.elastic.co/t/concurrency-control-of-update/183816)
**Author:** [@shayantabrizi](https://discuss.elastic.co/u/shayantabrizi)\ **Replies:** 5\ **Last updated:** [June 1, 2019, 1:09pm UTC](https://discuss.elastic.co/t/concurrency-control-of-update/183816 "2019-06-01T13:09:29Z")
I'm confused about the concurrency control of update. It seems that update does check for conflicts: In between the get and indexing phases of the update, it is possible that another process might have already updated … --- ## [Using regular expressions to blacklist terms](https://discuss.elastic.co/t/using-regular-expressions-to-blacklist-terms/48604)
**Author:** [@reza\_sadoddin](https://discuss.elastic.co/u/reza_sadoddin)\ **Replies:** 5\ **Last updated:** [April 29, 2016, 9:03am UTC](https://discuss.elastic.co/t/using-regular-expressions-to-blacklist-terms/48604 "2016-04-29T09:03:29Z")
I am wondering if there is a way to blacklist a group of terms (e.g. numbers) from being appearing in Graph? The idea is to ignore irrelevant concepts and focus on connections between concepts of interest. Thanks for s… --- ## [ECE v3.6.2 installation failure: client version 1.23 is too old. Minimum supported API version is 1.24](https://discuss.elastic.co/t/ece-v3-6-2-installation-failure-client-version-1-23-is-too-old-minimum-supported-api-version-is-1-24/351534)
**Author:** [@kuradakis](https://discuss.elastic.co/u/kuradakis)\ **Replies:** 1\ **Last updated:** [January 22, 2024, 11:56am UTC](https://discuss.elastic.co/t/ece-v3-6-2-installation-failure-client-version-1-23-is-too-old-minimum-supported-api-version-is-1-24/351534 "2024-01-22T11:56:14Z")
Hi All! I have recently started getting this error, last week(3rd week Jan 2024) all was working fine. Same error with 3.6.0 as well. The output is this: $ bash elastic-cloud-enterprise.sh install --cloud-enterprise… --- ## [Fleet agent - x509: certificate signed by unknown authority](https://discuss.elastic.co/t/fleet-agent-x509-certificate-signed-by-unknown-authority/298157)
**Author:** [@gabrielfsousa](https://discuss.elastic.co/u/gabrielfsousa)\ **Replies:** 1\ **Last updated:** [February 25, 2022, 12:35pm UTC](https://discuss.elastic.co/t/fleet-agent-x509-certificate-signed-by-unknown-authority/298157 "2022-02-25T12:35:39Z")
I have one fleet server, and 3 elastic agents in a K8S cluster. server: --env FLEET\_ENROLL=1\\ --env FLEET\_SERVER\_ENABLE=1\\ --env FLEET\_SERVER\_ELASTICSEARCH\_HOST=$(ELASTICSEARCHHOST)\\ --env FLEET\_SERVER\_SERVICE\_TOKEN=$(… --- ## [maxConcurrentShardRequests](https://discuss.elastic.co/t/maxconcurrentshardrequests/161602)
**Author:** [@Ram\_Ibaset](https://discuss.elastic.co/u/Ram_Ibaset)\ **Replies:** 1\ **Last updated:** [December 20, 2018, 6:33pm UTC](https://discuss.elastic.co/t/maxconcurrentshardrequests/161602 "2018-12-20T18:33:51Z")
I am running into this problem and have spent days trying to find a solution and no luck. I am on ELK stack 6.5.3 running in docker and docker swarm cluster It was working fine with 6.3.0 for months and after I upgrade… --- ## [Logstash unable to parse a simple json](https://discuss.elastic.co/t/logstash-unable-to-parse-a-simple-json/138315)
**Author:** [@pkaramol](https://discuss.elastic.co/u/pkaramol)\ **Replies:** 1\ **Last updated:** [July 3, 2018, 7:22am UTC](https://discuss.elastic.co/t/logstash-unable-to-parse-a-simple-json/138315 "2018-07-03T07:22:24Z")
I am just trying to read the simplest json possible via logstash and send it to elasticsearch. input json file: { "preview": false } input config input { file { path =\> "/usr/share/logstash/files/sample\_data… --- ## [Is it possible to merge results of a search for two indexes based on a unique identifier in common? Like a join](https://discuss.elastic.co/t/is-it-possible-to-merge-results-of-a-search-for-two-indexes-based-on-a-unique-identifier-in-common-like-a-join/237547)
**Author:** [@Brendow\_Adriel](https://discuss.elastic.co/u/Brendow_Adriel)\ **Replies:** 4\ **Last updated:** [June 18, 2020, 7:25am UTC](https://discuss.elastic.co/t/is-it-possible-to-merge-results-of-a-search-for-two-indexes-based-on-a-unique-identifier-in-common-like-a-join/237547 "2020-06-18T07:25:17Z")
Elasticsearch 7.7 using Java API REST from what I understand, the merge generates a new index. I just want to merge the final result of 2 indexes based on an identifier. As a join query of a relational database. i'ts po… --- ## [metrics.gauge.LazyDelegatingGauge unknown type](https://discuss.elastic.co/t/metrics-gauge-lazydelegatinggauge-unknown-type/219195)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 4\ **Last updated:** [February 17, 2020, 7:38am UTC](https://discuss.elastic.co/t/metrics-gauge-lazydelegatinggauge-unknown-type/219195 "2020-02-17T07:38:33Z")
Updated logstash and are still seeing the warning: constant ::Fixnum upon launching logstash anything to do clear this warning? Downloading Packages: logstash-7.6.0.rpm … --- ## [java.lang.NoSuchMethodError exception observed when indexing data in elasticsearch v5.2.2](https://discuss.elastic.co/t/java-lang-nosuchmethoderror-exception-observed-when-indexing-data-in-elasticsearch-v5-2-2/79715)
**Author:** [@kishore419](https://discuss.elastic.co/u/kishore419)\ **Replies:** 4\ **Last updated:** [April 7, 2017, 8:48am UTC](https://discuss.elastic.co/t/java-lang-nosuchmethoderror-exception-observed-when-indexing-data-in-elasticsearch-v5-2-2/79715 "2017-04-07T08:48:45Z")
Upgraded standalone elasticsearch software from v2.1.0 to v5.2.2 can any one share solution for the below issue? Exception in thread "elasticsearch\[\_client\_\]\[management\]\[T#1\]" java.lang.NoSuchMethodError: io.netty.buff… --- ## [Missing "origin" field on filebeat & packetbeat deb packages](https://discuss.elastic.co/t/missing-origin-field-on-filebeat-packetbeat-deb-packages/44541)
**Author:** [@fbarbeira](https://discuss.elastic.co/u/fbarbeira)\ **Replies:** 4\ **Last updated:** [March 18, 2016, 1:51pm UTC](https://discuss.elastic.co/t/missing-origin-field-on-filebeat-packetbeat-deb-packages/44541 "2016-03-18T13:51:52Z")
I have the installation of debian packages automatized with the package "unattended-upgrades", which I think is the "debian & ubuntu way" to do the automatic upgrades. In the "unattended-upgrades" config you must select … --- ## [Load config file into logstash](https://discuss.elastic.co/t/load-config-file-into-logstash/24915)
**Author:** [@Smasell](https://discuss.elastic.co/u/Smasell)\ **Replies:** 4\ **Last updated:** [July 6, 2015, 5:53am UTC](https://discuss.elastic.co/t/load-config-file-into-logstash/24915 "2015-07-06T05:53:21Z")
Hi!!! In my config file i have a part: if \[message\] =~ /^Deauthorizing client / { mutate { add\_tag =\> “end\_timer” } noop { add\_field =\> { "event" =\> "deauthorize" }} } if \[message\] =~ /^Logged in/ { … --- ## [Change the structure of response json](https://discuss.elastic.co/t/change-the-structure-of-response-json/2924)
**Author:** [@tfreitas](https://discuss.elastic.co/u/tfreitas)\ **Replies:** 4\ **Last updated:** [April 22, 2010, 3:10pm UTC](https://discuss.elastic.co/t/change-the-structure-of-response-json/2924 "2010-04-22T15:10:10Z")
Hello Shay, I have a years using compass, now I see elasticsearch, I want to play with it. With ElasticSearch I could do: 1) in "search" return a json structure different from the index?. Example: index: {… --- ## [Novice:something wrong with configuration error](https://discuss.elastic.co/t/novice-something-wrong-with-configuration-error/56614)
**Author:** [@Ankush\_Mehta](https://discuss.elastic.co/u/Ankush_Mehta)\ **Replies:** 2\ **Last updated:** [July 28, 2016, 8:03pm UTC](https://discuss.elastic.co/t/novice-something-wrong-with-configuration-error/56614 "2016-07-28T20:03:33Z")
I am a beginner in ELK and this is my first try in running logstash.I followed the following step: 1) Created a config file(ANSI encoding) in my local C:\\logstash-1.5.2\\conf\\logstash\_test.config.The contents are as below… --- ## [Alerts on SIEM](https://discuss.elastic.co/t/alerts-on-siem/321297)
**Author:** [@Samara\_Brych](https://discuss.elastic.co/u/Samara_Brych)\ **Replies:** 2\ **Last updated:** [December 27, 2022, 6:34pm UTC](https://discuss.elastic.co/t/alerts-on-siem/321297 "2022-12-27T18:34:27Z")
If I mark an alert as ackowledged on Elastic SIEM, and the alert occurs again, it will notify me again or never more will display on open alerts? --- ## [索引无法彻底删除](https://discuss.elastic.co/t/topic/135517)
**Author:** [@wuwenjie\_cn](https://discuss.elastic.co/u/wuwenjie_cn)\ **Replies:** 3\ **Last updated:** [June 13, 2018, 10:43am UTC](https://discuss.elastic.co/t/topic/135517 "2018-06-13T10:43:21Z")
在kibana端，dev\_tools模块下面使用命令删除索引后，在managent模块下面仍然能看到被删除了的索引（这些索引内无数据） \[2\] 从上图中可以看出，索引已经被删除了。 下图中，在Management模块下仍然能看到已删除的索引名称，但是索引里面已经找不到数据了， \[3\] 提问：如何才能彻底的把索引删除了，（包括内容和名称） 提前谢谢！ --- ## [Can't get rsyslog+ELK working](https://discuss.elastic.co/t/cant-get-rsyslog-elk-working/51009)
**Author:** [@kevinthierry](https://discuss.elastic.co/u/kevinthierry)\ **Replies:** 3\ **Last updated:** [May 26, 2016, 8:51am UTC](https://discuss.elastic.co/t/cant-get-rsyslog-elk-working/51009 "2016-05-26T08:51:59Z")
Hello, I am trying to setup a rsyslog+ELK stack following this tutorial without success: https://www.elastic.co/blog/how-to-centralize-logs-with-rsyslog-logstash-and-elasticsearch-on-ubuntu-14-04 My configuration is … --- ## [Extra quote/parenthesis impedes typing](https://discuss.elastic.co/t/extra-quote-parenthesis-impedes-typing/218212)
**Author:** [@nashley](https://discuss.elastic.co/u/nashley)\ **Replies:** 2\ **Last updated:** [February 20, 2020, 1:38pm UTC](https://discuss.elastic.co/t/extra-quote-parenthesis-impedes-typing/218212 "2020-02-20T13:38:48Z")
Apologies if this is the wrong place to post this. When typing queries into Kibana, it'll "helpfully" add a " or ) after a " or ( is typed. Is there any chance this could be configurable? I imagine that some people woul… --- ## [Tribe node setup with a remote multi-node cluster](https://discuss.elastic.co/t/tribe-node-setup-with-a-remote-multi-node-cluster/40050)
**Author:** [@vpoliboy](https://discuss.elastic.co/u/vpoliboy)\ **Replies:** 2\ **Last updated:** [February 11, 2016, 5:22pm UTC](https://discuss.elastic.co/t/tribe-node-setup-with-a-remote-multi-node-cluster/40050 "2016-02-11T17:22:16Z")
We are trying to setup a tribe node that connects to a remote single master multi-node cluster. The constraints we have right now is that the tribe node has connectivty to the master node only because of issues like fi… --- ## [Error while using .scan() function call](https://discuss.elastic.co/t/error-while-using-scan-function-call/343039)
**Author:** [@hjazz6](https://discuss.elastic.co/u/hjazz6)\ **Replies:** 6\ **Last updated:** [September 15, 2023, 2:17am UTC](https://discuss.elastic.co/t/error-while-using-scan-function-call/343039 "2023-09-15T02:17:54Z")
Hi, I have the following Python code to query my ES cluster (v8.8.0). from elasticsearch import Elasticsearch from elasticsearch\_dsl import Search for i in range(0, 100): s = Search(using=es, index=index\_name) \\ … --- ## [How to turn a data node into a dedicated ML node?](https://discuss.elastic.co/t/how-to-turn-a-data-node-into-a-dedicated-ml-node/246340)
**Author:** [@Shubhangi](https://discuss.elastic.co/u/Shubhangi)\ **Replies:** 6\ **Last updated:** [September 16, 2020, 6:22pm UTC](https://discuss.elastic.co/t/how-to-turn-a-data-node-into-a-dedicated-ml-node/246340 "2020-09-16T18:22:46Z")
Hi, I've 8 data nodes right now in production. I want to test ML in production, how many dedicated nodes would ML require? Also, I won't be adding any new nodes, so, how can I make the existing data nodes, machine learn… --- ## [Filebeat checking for x-pack despite monitoring disabled](https://discuss.elastic.co/t/filebeat-checking-for-x-pack-despite-monitoring-disabled/174836)
**Author:** [@elizajanus](https://discuss.elastic.co/u/elizajanus)\ **Replies:** 6\ **Last updated:** [April 2, 2019, 5:06pm UTC](https://discuss.elastic.co/t/filebeat-checking-for-x-pack-despite-monitoring-disabled/174836 "2019-04-02T17:06:36Z")
Filebeat is failing to connect to Elasticsearch only in dev, despite having the same config as prod. The ping to the ES host returns a 200, but Filebeat is then attempting to connect to an x-pack endpoint, even though AW… --- ## [Configuring Auditbeat to only report modifications to files I want to monitor](https://discuss.elastic.co/t/configuring-auditbeat-to-only-report-modifications-to-files-i-want-to-monitor/150611)
**Author:** [@nnarain](https://discuss.elastic.co/u/nnarain)\ **Replies:** 6\ **Last updated:** [October 2, 2018, 6:33pm UTC](https://discuss.elastic.co/t/configuring-auditbeat-to-only-report-modifications-to-files-i-want-to-monitor/150611 "2018-10-02T18:33:31Z")
Hey, I'd like some advice on configuring my Auditbeat instance to report modifications to the files I've specified. I get a lot of other entries into my elastic index that are not relevant to the rules I've specified. C… --- ## [Partially matched shorter field takes precedence over completely matched larger field](https://discuss.elastic.co/t/partially-matched-shorter-field-takes-precedence-over-completely-matched-larger-field/108523)
**Author:** [@aniketkk](https://discuss.elastic.co/u/aniketkk)\ **Replies:** 6\ **Last updated:** [November 22, 2017, 1:15pm UTC](https://discuss.elastic.co/t/partially-matched-shorter-field-takes-precedence-over-completely-matched-larger-field/108523 "2017-11-22T13:15:35Z")
Hi, I have two fields in my index on which I am querying. One is the title and another is content. Content is a big field and contains entire content of an article. Both fields have the same analyzer with min\_gram as 3… --- ## [Filebeat Fortinet have error message](https://discuss.elastic.co/t/filebeat-fortinet-have-error-message/258261)
**Author:** [@fadjar340](https://discuss.elastic.co/u/fadjar340)\ **Replies:** 7\ **Last updated:** [December 22, 2020, 2:34pm UTC](https://discuss.elastic.co/t/filebeat-fortinet-have-error-message/258261 "2020-12-22T14:34:04Z")
Hi @P1llus, I saw you're the person that give more comment on Filebeat Fortinet module, so I directly ask for help. I just send my fortinet log into my rsyslog server and save it into the file then I enabled the fortin… --- ## [Standalone cluster using new parameter beat-xpack in metricbeat](https://discuss.elastic.co/t/standalone-cluster-using-new-parameter-beat-xpack-in-metricbeat/205820)
**Author:** [@Christophe\_Journel](https://discuss.elastic.co/u/Christophe_Journel)\ **Replies:** 7\ **Last updated:** [October 30, 2019, 9:23pm UTC](https://discuss.elastic.co/t/standalone-cluster-using-new-parameter-beat-xpack-in-metricbeat/205820 "2019-10-30T21:23:16Z")
Hello, I have multiple filebeat on several cluster. The monitoring is done by using beat-xpack feature from metricbeat on another server, using the HTTP entry point on each filebeat. However, Metricbeat ( with a correc… --- ## [JSON filter, query](https://discuss.elastic.co/t/json-filter-query/107902)
**Author:** [@runtman](https://discuss.elastic.co/u/runtman)\ **Replies:** 7\ **Last updated:** [November 16, 2017, 12:29pm UTC](https://discuss.elastic.co/t/json-filter-query/107902 "2017-11-16T12:29:46Z")
Hello, I am receiving alerts from SOPHOS in clear JSON, below is an example: {"end": "2017-11-15T21:35:18.000Z", "customer\_id": "x", "endpoint\_type": "computer", "dhost": "x", "type": "Event::Endpoint::WebControlViolati… --- ## [Deploying kibana-5.6 on bluemix](https://discuss.elastic.co/t/deploying-kibana-5-6-on-bluemix/103164)
**Author:** [@Chooi\_Ling\_Si\_Toh](https://discuss.elastic.co/u/Chooi_Ling_Si_Toh)\ **Replies:** 7\ **Last updated:** [October 18, 2017, 10:10am UTC](https://discuss.elastic.co/t/deploying-kibana-5-6-on-bluemix/103164 "2017-10-18T10:10:58Z")
Hi all, Anyone have tried to deploy kibana version 5.6 on bluemix? I encountered issue of pushing the app to bluemix. Thank you for help alot.. Errorstack as below: async@0.2.10 /tmp/app/node\_modules/webpack/node\_mo… --- ## [An error occurs when loading loads with " logstash "](https://discuss.elastic.co/t/an-error-occurs-when-loading-loads-with-logstash/102367)
**Author:** [@taetaetae](https://discuss.elastic.co/u/taetaetae)\ **Replies:** 7\ **Last updated:** [October 2, 2017, 5:51pm UTC](https://discuss.elastic.co/t/an-error-occurs-when-loading-loads-with-logstash/102367 "2017-10-02T17:51:41Z")
hi An error occurs when loading loads with " logstash ". The setup file is shown below. input { http { host =\> "0.0.0.0" port =\> "28080" codec =\> es\_bulk {} } } filter { mutate { remove\_field =\> \["host","@tim… --- ## [Include empty rows not working for date field in Kibana table lens](https://discuss.elastic.co/t/include-empty-rows-not-working-for-date-field-in-kibana-table-lens/313792)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 5\ **Last updated:** [September 13, 2022, 11:18am UTC](https://discuss.elastic.co/t/include-empty-rows-not-working-for-date-field-in-kibana-table-lens/313792 "2022-09-13T11:18:44Z")
Hello, i'm creating ES indices every month where one of the date fields can be empty for all documents from time to time. To make sure that visualizations do not break if this happens i added a mapping for this field to… --- ## [Request body is required when updating an index template using the Dev console](https://discuss.elastic.co/t/request-body-is-required-when-updating-an-index-template-using-the-dev-console/293775)
**Author:** [@dev9](https://discuss.elastic.co/u/dev9)\ **Replies:** 5\ **Last updated:** [January 7, 2022, 6:49pm UTC](https://discuss.elastic.co/t/request-body-is-required-when-updating-an-index-template-using-the-dev-console/293775 "2022-01-07T18:49:41Z")
Hi, How do I update an index template using the Dev Console? when I tried the below, I got a parse exception request body is required. I am using the latest version of elastic PUT \_index\_template/test/ { "… --- ## [Need help to aggregate a text field into a visualization](https://discuss.elastic.co/t/need-help-to-aggregate-a-text-field-into-a-visualization/269034)
**Author:** [@trubisky](https://discuss.elastic.co/u/trubisky)\ **Replies:** 5\ **Last updated:** [April 2, 2021, 5:14pm UTC](https://discuss.elastic.co/t/need-help-to-aggregate-a-text-field-into-a-visualization/269034 "2021-04-02T17:14:22Z")
Hi All, I've spent a ton of time on this and I feel like it should be relatively simple but for some reason I'm not able to find the solution. I'll also add that I am fairly novice at visualizations. The docs looks sim… --- ## [Doesn\`t visible after refresh?](https://discuss.elastic.co/t/doesn-t-visible-after-refresh/124014)
**Author:** [@hubo3085632](https://discuss.elastic.co/u/hubo3085632)\ **Replies:** 5\ **Last updated:** [March 16, 2018, 9:29am UTC](https://discuss.elastic.co/t/doesn-t-visible-after-refresh/124014 "2018-03-16T09:29:35Z")
I encountered a problem that can not search a doc after refresh. here is my operation: 1 client.prepareIndex(idx, idx, id).setSource(doc).execute(); 2 client.admin().indices() .prepareRefresh(idx) .get(); 3 client.… --- ## [SearchHit.fields() returns null even though fields are there](https://discuss.elastic.co/t/searchhit-fields-returns-null-even-though-fields-are-there/3429)
**Author:** [@John\_Chang](https://discuss.elastic.co/u/John_Chang)\ **Replies:** 5\ **Last updated:** [October 12, 2010, 12:37am UTC](https://discuss.elastic.co/t/searchhit-fields-returns-null-even-though-fields-are-there/3429 "2010-10-12T00:37:15Z")
Just upgraded from 0.9 to 0.11.0 and I find that org.elasticsearch.search.SearchHit.fields() is returning null even when I know the requested fields are there. When I do the query from the url through curl (including th… --- ## [Dropped unsampled transactions in \>= 8.x poses a problem](https://discuss.elastic.co/t/dropped-unsampled-transactions-in-8-x-poses-a-problem/308930)
**Author:** [@Pawel\_Bakiewicz](https://discuss.elastic.co/u/Pawel_Bakiewicz)\ **Replies:** 3\ **Last updated:** [July 7, 2022, 6:08pm UTC](https://discuss.elastic.co/t/dropped-unsampled-transactions-in-8-x-poses-a-problem/308930 "2022-07-07T18:08:49Z")
Hi, If I'm not mistaken, since version 8.0 we cannot collect unsampled transactions. (PR: Remove \`apm-server.sampling.keep\_unsampled\` config by axw · Pull Request #6514 · elastic/apm-server · GitHub). No option can tur… --- ## [Custom script sort type \[integer\] not supported](https://discuss.elastic.co/t/custom-script-sort-type-integer-not-supported/74232)
**Author:** [@rinat.io](https://discuss.elastic.co/u/rinat.io)\ **Replies:** 2\ **Last updated:** [February 8, 2017, 11:40am UTC](https://discuss.elastic.co/t/custom-script-sort-type-integer-not-supported/74232 "2017-02-08T11:40:50Z")
Hey guys, I'm trying to make a custom script sorting and can't find what type values I may use. This page says that short, integer and float types are supported, but it gives me an error: "reason" : { … [Previous page](https://discuss.elastic.co/top.md?page=907&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=909&per_page=50&period=all)