# Top **URL:** https://discuss.elastic.co/top.md?page=915&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 916 --- ## [Uncertain field types when extracting fields from getSource() (java api)](https://discuss.elastic.co/t/uncertain-field-types-when-extracting-fields-from-getsource-java-api/10432)
**Author:** [@Burak\_Emre\_Kabakci](https://discuss.elastic.co/u/Burak_Emre_Kabakci)\ **Replies:** 7\ **Last updated:** [November 20, 2014, 7:43pm UTC](https://discuss.elastic.co/t/uncertain-field-types-when-extracting-fields-from-getsource-java-api/10432 "2014-11-20T19:43:50Z")
I'm trying to extract fields from org.elasticsearch.search.SearchHit.getSource() but I'm having difficulties of determining types of fields. For example I have a field named rank defined as long with \_mapping and w… --- ## [Changing the number of shards and replicas of an existing index](https://discuss.elastic.co/t/changing-the-number-of-shards-and-replicas-of-an-existing-index/2829)
**Author:** [@Bruno\_Dumon](https://discuss.elastic.co/u/Bruno_Dumon)\ **Replies:** 3\ **Last updated:** [February 25, 2010, 12:49pm UTC](https://discuss.elastic.co/t/changing-the-number-of-shards-and-replicas-of-an-existing-index/2829 "2010-02-25T12:49:43Z")
Hi, Do you have any plans or thoughts on allowing to change (increase/decrease) the number of shards and replicas of an existing index? It seems like currently these can only be specified at index creation time. … --- ## [Watcher - Execution history error state](https://discuss.elastic.co/t/watcher-execution-history-error-state/297139)
**Author:** [@Teckinfor](https://discuss.elastic.co/u/Teckinfor)\ **Replies:** 6\ **Last updated:** [February 21, 2022, 1:22pm UTC](https://discuss.elastic.co/t/watcher-execution-history-error-state/297139 "2022-02-21T13:22:13Z")
Hello, I have created a watcher to be alerted when the price of an item goes up too much. It is a piece of information that I receive from enterprise search and that I have already implemented in a dashboard. When… --- ## [Index routing allocation does appear to move shards over to specified node](https://discuss.elastic.co/t/index-routing-allocation-does-appear-to-move-shards-over-to-specified-node/292682)
**Author:** [@Kay\_Khan](https://discuss.elastic.co/u/Kay_Khan)\ **Replies:** 6\ **Last updated:** [December 22, 2021, 3:34pm UTC](https://discuss.elastic.co/t/index-routing-allocation-does-appear-to-move-shards-over-to-specified-node/292682 "2021-12-22T15:34:33Z")
I am trying to separate indexes so that they are assigned to specific nodes. I have been following this documentation in order to achieve that. I have an Elasticsearch cluster with 3 nodes. Each node has been given a … --- ## [Why i have this error :: \_jsonparsefailure](https://discuss.elastic.co/t/why-i-have-this-error-jsonparsefailure/111190)
**Author:** [@yaser](https://discuss.elastic.co/u/yaser)\ **Replies:** 2\ **Last updated:** [December 15, 2017, 4:34pm UTC](https://discuss.elastic.co/t/why-i-have-this-error-jsonparsefailure/111190 "2017-12-15T16:34:07Z")
i send string like this message filed from rabbitmq to logstash but i cant parse my json to my mapping! "message": "{DeviceID :2155CA", "tags": \[ "\_jsonparsefailure" \] }, --- ## [Spark, analogy between shard and partition is wrong](https://discuss.elastic.co/t/spark-analogy-between-shard-and-partition-is-wrong/81847)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 2\ **Last updated:** [April 26, 2017, 7:10am UTC](https://discuss.elastic.co/t/spark-analogy-between-shard-and-partition-is-wrong/81847 "2017-04-26T07:10:41Z")
The plugin es4Hadoop make an analogy between ES shard and Spark partition, but it's not good. Most of Spark users, advice to have "small" partitions, about 512M, for instance, Spark cannot cache in disk more than 2Gb (… --- ## [Import ndjson in kibana helm deployment](https://discuss.elastic.co/t/import-ndjson-in-kibana-helm-deployment/215338)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 5\ **Last updated:** [February 13, 2020, 2:43pm UTC](https://discuss.elastic.co/t/import-ndjson-in-kibana-helm-deployment/215338 "2020-02-13T14:43:30Z")
Hi, I have exported some dashboards (ndjson files) and I would like to have these exports imported in a new kibana-helm deployment. Is this possible? If yes, how can I do something like this? Thank you in advance! --- ## [Swagger-4-es (Swagger UI for Key Elasticsearch Endpoints)](https://discuss.elastic.co/t/swagger-4-es-swagger-ui-for-key-elasticsearch-endpoints/293012)
**Author:** [@Johnnycc1](https://discuss.elastic.co/u/Johnnycc1)\ **Replies:** 1\ **Last updated:** [January 4, 2022, 7:42am UTC](https://discuss.elastic.co/t/swagger-4-es-swagger-ui-for-key-elasticsearch-endpoints/293012 "2022-01-04T07:42:45Z")
Hey Elasticsearch community, I have created an openapi schema for the key Elasticsearch endpoints (or at least the ones I think are key). If you don't know what that is, basically when paired with the swagger-ui library… --- ## [Error while running yarn kbn bootstrap](https://discuss.elastic.co/t/error-while-running-yarn-kbn-bootstrap/186572)
**Author:** [@saravananselvamohan](https://discuss.elastic.co/u/saravananselvamohan)\ **Replies:** 4\ **Last updated:** [June 21, 2019, 11:52am UTC](https://discuss.elastic.co/t/error-while-running-yarn-kbn-bootstrap/186572 "2019-06-21T11:52:23Z")
Error: Command failed: yarn run kbn:bootstrap Error: spawn git ENOENT at Process.ChildProcess.\_handle.onexit (internal/child\_process.js:240:19) at onErrorNT (internal/child\_process.js:415:16) at process.\_tickCallback… --- ## [Winlogbeat creates indexes based on dates from the past](https://discuss.elastic.co/t/winlogbeat-creates-indexes-based-on-dates-from-the-past/62403)
**Author:** [@gmourani](https://discuss.elastic.co/u/gmourani)\ **Replies:** 4\ **Last updated:** [October 7, 2016, 3:38pm UTC](https://discuss.elastic.co/t/winlogbeat-creates-indexes-based-on-dates-from-the-past/62403 "2016-10-07T15:38:44Z")
Hello, I've a strange problem with winlogbeat. I've installed winlogbeat 1.3 on servers and receive directly on elastic port 9200 corrupted log that create indexes starting from December 2015 through now! Event if I de… --- ## [\[savedobjects-service\] Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations](https://discuss.elastic.co/t/savedobjects-service-waiting-until-all-elasticsearch-nodes-are-compatible-with-kibana-before-starting-saved-objects-migrations/277968)
**Author:** [@Phoybe](https://discuss.elastic.co/u/Phoybe)\ **Replies:** 0\ **Last updated:** [July 6, 2021, 2:22pm UTC](https://discuss.elastic.co/t/savedobjects-service-waiting-until-all-elasticsearch-nodes-are-compatible-with-kibana-before-starting-saved-objects-migrations/277968 "2021-07-06T14:22:50Z")
Hi, I'm stuck in "Waiting until all Elasticsearch nodes are compatible with Kibana before starting saved objects migrations..." My kibana.yml server.host: 0.0.0.0 server.name: "elk1" elasticsearch.hosts: \["https://loc… --- ## [Caused by: java.lang.NoClassDefFoundError: org/apache/lucene/search/join/ToParentBlockJoinQuery](https://discuss.elastic.co/t/caused-by-java-lang-noclassdeffounderror-org-apache-lucene-search-join-toparentblockjoinquery/143974)
**Author:** [@f3b989beb926855a2d41](https://discuss.elastic.co/u/f3b989beb926855a2d41)\ **Replies:** 1\ **Last updated:** [August 12, 2018, 5:44pm UTC](https://discuss.elastic.co/t/caused-by-java-lang-noclassdeffounderror-org-apache-lucene-search-join-toparentblockjoinquery/143974 "2018-08-12T17:44:32Z")
Elasticsearch version : elasticsearch.jar:6.3.2 Exception: Caused by: java.lang.NoClassDefFoundError: org/apache/lucene/search/join/ToParentBlockJoinQuery Problem Description I was trying to sort a field of a documen… --- ## [Query not working as intended?](https://discuss.elastic.co/t/query-not-working-as-intended/100178)
**Author:** [@mberger1](https://discuss.elastic.co/u/mberger1)\ **Replies:** 1\ **Last updated:** [September 12, 2017, 12:35pm UTC](https://discuss.elastic.co/t/query-not-working-as-intended/100178 "2017-09-12T12:35:30Z")
Hey there. The following Query is not working as I expect it to. Message is a string field. \[image\] Should this not only show me those messages, which containt the String "RCV\[" ? --- ## [I see timeout excpetion in logstash](https://discuss.elastic.co/t/i-see-timeout-excpetion-in-logstash/266140)
**Author:** [@ranjini](https://discuss.elastic.co/u/ranjini)\ **Replies:** 0\ **Last updated:** [March 3, 2021, 4:20pm UTC](https://discuss.elastic.co/t/i-see-timeout-excpetion-in-logstash/266140 "2021-03-03T16:20:59Z")
Below is the error message in logstash-plain.log \[2021-03-03T16:00:46,719\]\[WARN \]\[io.netty.channel.DefaultChannelPipeline\]\[main\]\[ed5928ede48a4919694eb040ed1411b2d0e6482d5881ff856cc046fe3412681f\] An exceptionCaught() eve… --- ## [Elasticsearch service Hosted on elastic cloud with Kibana running on local machine](https://discuss.elastic.co/t/elasticsearch-service-hosted-on-elastic-cloud-with-kibana-running-on-local-machine/215099)
**Author:** [@jaydengre](https://discuss.elastic.co/u/jaydengre)\ **Replies:** 1\ **Last updated:** [January 15, 2020, 9:38am UTC](https://discuss.elastic.co/t/elasticsearch-service-hosted-on-elastic-cloud-with-kibana-running-on-local-machine/215099 "2020-01-15T09:38:02Z")
We are using hosted elasticsearch service with platinum license. And we are trying to connect this hosted ES service by KIbana standard distribution server on local machine. Which is working great. We had to use kibana o… --- ## [How to migrate old data from one server to another server](https://discuss.elastic.co/t/how-to-migrate-old-data-from-one-server-to-another-server/153991)
**Author:** [@agilan](https://discuss.elastic.co/u/agilan)\ **Replies:** 1\ **Last updated:** [October 25, 2018, 5:51pm UTC](https://discuss.elastic.co/t/how-to-migrate-old-data-from-one-server-to-another-server/153991 "2018-10-25T17:51:59Z")
am trying to migrate data logs from old elasticsearch server to new elasticsearch server..reply ASAP --- ## [Kibana 8.18.8, 8.19.4, 9.0.7, 9.1.4 Security Update (ESA-2025-16)](https://discuss.elastic.co/t/kibana-8-18-8-8-19-4-9-0-7-9-1-4-security-update-esa-2025-16/382450)
**Author:** [@ikakavas](https://discuss.elastic.co/u/ikakavas)\ **Replies:** 0\ **Last updated:** [October 6, 2025, 4:24pm UTC](https://discuss.elastic.co/t/kibana-8-18-8-8-19-4-9-0-7-9-1-4-security-update-esa-2025-16/382450 "2025-10-06T16:24:59Z")
Kibana Cross-Site-Scripting (XSS) (ESA-2025-16) Improper Neutralization of Input During Web Page Generation in Vega visualizations in Kibana can lead to Cross-Site-Scripting (XSS) Affected Versions: 7.x: All versions… --- ## [The \[0.0.0\] version of the \[jdbc\] client is not compatible with Elasticsearch version \[7.10.0\];\]](https://discuss.elastic.co/t/the-0-0-0-version-of-the-jdbc-client-is-not-compatible-with-elasticsearch-version-7-10-0/267462)
**Author:** [@yxmm-wxe](https://discuss.elastic.co/u/yxmm-wxe)\ **Replies:** 3\ **Last updated:** [March 30, 2021, 9:52am UTC](https://discuss.elastic.co/t/the-0-0-0-version-of-the-jdbc-client-is-not-compatible-with-elasticsearch-version-7-10-0/267462 "2021-03-30T09:52:28Z")
Hello, everyone, I have a strange problem with the JDBC driver version after packaging. \ \org.elasticsearch.plugin\ \x-pack-sql-jdbc\ \7.10.0\ **Author:** [@dragick](https://discuss.elastic.co/u/dragick)\ **Replies:** 3\ **Last updated:** [August 8, 2017, 1:24am UTC](https://discuss.elastic.co/t/spark-to-es-nosuchmethoderror-dataframefieldextractor-extractfield/96042 "2017-08-08T01:24:41Z") Hello! I am trying to figure out how to upsert rows to ElasticSearch from Spark. I am using elasticsearch-spark-20\_2.10-5.5.1.jar, on a Spark cluster running Spark2.1 with Scala 2.1 My DataFrame printSchema() looks lik… --- ## [Sorting based on a dynamic field array?](https://discuss.elastic.co/t/sorting-based-on-a-dynamic-field-array/10573)
**Author:** [@Derry\_O\_Sullivan](https://discuss.elastic.co/u/Derry_O_Sullivan)\ **Replies:** 3\ **Last updated:** [February 1, 2013, 12:58pm UTC](https://discuss.elastic.co/t/sorting-based-on-a-dynamic-field-array/10573 "2013-02-01T12:58:14Z")
Hi all, I'm trying to sort based on a dynamic field (it's an array of values). The field is present in the mapping: Request to :9200/items/item/\_mapping: { - item: { - properties: … --- ## [Range date labels and grouping in graph bar graph](https://discuss.elastic.co/t/range-date-labels-and-grouping-in-graph-bar-graph/50927)
**Author:** [@isaacpm](https://discuss.elastic.co/u/isaacpm)\ **Replies:** 2\ **Last updated:** [May 26, 2016, 9:26am UTC](https://discuss.elastic.co/t/range-date-labels-and-grouping-in-graph-bar-graph/50927 "2016-05-26T09:26:52Z")
Hi, I've got this graph I'd like to change two things that I can't figure out, no matter which combinations I try: The date range aggregations to be on the top aggregation, not on the bottom one. The date range agg… --- ## [Logstash issue with dropping rows with a condition check on empty elements](https://discuss.elastic.co/t/logstash-issue-with-dropping-rows-with-a-condition-check-on-empty-elements/214132)
**Author:** [@Nick11](https://discuss.elastic.co/u/Nick11)\ **Replies:** 7\ **Last updated:** [January 8, 2020, 2:51pm UTC](https://discuss.elastic.co/t/logstash-issue-with-dropping-rows-with-a-condition-check-on-empty-elements/214132 "2020-01-08T14:51:51Z")
I have a CSV file with the following 2 rows (sample) reservation date, reservationID Jan 6th, res:id:adbcj-oksok-gjkk Jan 10th, Mar 10th, res:id:kkbcj-oksok-gjkk My ask is to drop empty rows and apply a grok filter on … --- ## [Fetch the substring of a field and draw pie-chart visualization of counts in Kibana](https://discuss.elastic.co/t/fetch-the-substring-of-a-field-and-draw-pie-chart-visualization-of-counts-in-kibana/122411)
**Author:** [@anishgin](https://discuss.elastic.co/u/anishgin)\ **Replies:** 1\ **Last updated:** [March 4, 2018, 7:31pm UTC](https://discuss.elastic.co/t/fetch-the-substring-of-a-field-and-draw-pie-chart-visualization-of-counts-in-kibana/122411 "2018-03-04T19:31:14Z")
Hello I have lots of messages structured as following : host: xxxx severity: yyy msg: Cannot find the mapping for string1. host: xxxx severity: yyy msg: Cannot find the mapping for string3. host: xxxx severity: y… --- ## [Elastic cluster,set up security,password setup all collide-native authentication](https://discuss.elastic.co/t/elastic-cluster-set-up-security-password-setup-all-collide-native-authentication/286448)
**Author:** [@Netanelp](https://discuss.elastic.co/u/Netanelp)\ **Replies:** 6\ **Last updated:** [October 13, 2021, 11:08am UTC](https://discuss.elastic.co/t/elastic-cluster-set-up-security-password-setup-all-collide-native-authentication/286448 "2021-10-13T11:08:49Z")
Hey guys, I will start with my main goal here, trying to move my elastic cluster to use native security/authentication. I've recently taken over a project involving an elastic cluster(Gold plan) trying to make it work … --- ## [How to print out %{host.ip} using line codec?](https://discuss.elastic.co/t/how-to-print-out-host-ip-using-line-codec/269750)
**Author:** [@hmiti](https://discuss.elastic.co/u/hmiti)\ **Replies:** 6\ **Last updated:** [April 10, 2021, 3:09pm UTC](https://discuss.elastic.co/t/how-to-print-out-host-ip-using-line-codec/269750 "2021-04-10T15:09:32Z")
I am using the line codec to output the logs into a text file. Requested to include only the IP and log entry itself. Tried different combination of %{host}.{ip} like this, nothing works so far. output { file { p… --- ## [Can we create index template without mappings?](https://discuss.elastic.co/t/can-we-create-index-template-without-mappings/186697)
**Author:** [@Jeetu19](https://discuss.elastic.co/u/Jeetu19)\ **Replies:** 6\ **Last updated:** [June 21, 2019, 10:14am UTC](https://discuss.elastic.co/t/can-we-create-index-template-without-mappings/186697 "2019-06-21T10:14:44Z")
I dont know the types of field coming from log, so can we create template without mapping of field like below. PUT \_template/test { "index\_patterns": "test\*", "settings": { "number\_of\_shards": 3, "number\_of\_replic… --- ## [Custom Bundle - synonyms\_path not working](https://discuss.elastic.co/t/custom-bundle-synonyms-path-not-working/220209)
**Author:** [@acuitymd](https://discuss.elastic.co/u/acuitymd)\ **Replies:** 5\ **Last updated:** [March 1, 2020, 1:57am UTC](https://discuss.elastic.co/t/custom-bundle-synonyms-path-not-working/220209 "2020-03-01T01:57:28Z")
Hi, I'm trying to upload custom bundles of synonym files to my cluster, and I've followed these instructions to a T. https://www.elastic.co/guide/en/cloud/current/ec-custom-bundles.html I have a zip file with the stru… --- ## [Best practices configuring indexes to periodic logs](https://discuss.elastic.co/t/best-practices-configuring-indexes-to-periodic-logs/46392)
**Author:** [@nlhedder](https://discuss.elastic.co/u/nlhedder)\ **Replies:** 5\ **Last updated:** [April 6, 2016, 9:04am UTC](https://discuss.elastic.co/t/best-practices-configuring-indexes-to-periodic-logs/46392 "2016-04-06T09:04:37Z")
Not sure if my search on the forum is correct (many hits on searchin in Indexes, so I'll try to post my question here: We have several servers /switches/appliances which I would like to pull the logging into ELK. This … --- ## [Logstash exit with code 0](https://discuss.elastic.co/t/logstash-exit-with-code-0/279891)
**Author:** [@abdo37](https://discuss.elastic.co/u/abdo37)\ **Replies:** 4\ **Last updated:** [August 2, 2021, 7:25am UTC](https://discuss.elastic.co/t/logstash-exit-with-code-0/279891 "2021-08-02T07:25:39Z")
heey i'm trynig to use docker-compose for logstash,elasticsearch,postgresql and when i start docker-compose all containers are working except logstash container it gives me logstash exit with code 0 there is my docker… --- ## [Jmx metrics using logstash jmx input plugin](https://discuss.elastic.co/t/jmx-metrics-using-logstash-jmx-input-plugin/184889)
**Author:** [@460](https://discuss.elastic.co/u/460)\ **Replies:** 4\ **Last updated:** [June 10, 2019, 12:55pm UTC](https://discuss.elastic.co/t/jmx-metrics-using-logstash-jmx-input-plugin/184889 "2019-06-10T12:55:30Z")
Hello team I have installed jmx plugin to logstash 6.6.2 How do this plugin work. When I start the logstash with jmx input and jmx config as the input file.....It is giving an error....no such file or directory found. … --- ## [Use JSON Input on an aggregation in visualization](https://discuss.elastic.co/t/use-json-input-on-an-aggregation-in-visualization/158271)
**Author:** [@nils](https://discuss.elastic.co/u/nils)\ **Replies:** 1\ **Last updated:** [November 27, 2018, 6:42am UTC](https://discuss.elastic.co/t/use-json-input-on-an-aggregation-in-visualization/158271 "2018-11-27T06:42:05Z")
hi, I have a visualization on Kibana of type Data table, I use JSON Input to make more filter on request instead of "Add filter" button, but the result didn't show in table. Any thought about how to make it ? Thanks … --- ## [Elasticsearch index based on source field](https://discuss.elastic.co/t/elasticsearch-index-based-on-source-field/97442)
**Author:** [@Robert\_Kovacs](https://discuss.elastic.co/u/Robert_Kovacs)\ **Replies:** 1\ **Last updated:** [August 17, 2017, 7:41pm UTC](https://discuss.elastic.co/t/elasticsearch-index-based-on-source-field/97442 "2017-08-17T19:41:34Z")
Hi! I would like to know if I could output to a different elasticsearch index based on my logs source field? In the sources I have unique identifiers and I would like to make indexes with these identifiers. --- ## [ERROR instance/beat.go:916 Exiting: Failed to import dashboard](https://discuss.elastic.co/t/error-instance-beat-go-916-exiting-failed-to-import-dashboard/210362)
**Author:** [@shiva13](https://discuss.elastic.co/u/shiva13)\ **Replies:** 2\ **Last updated:** [December 9, 2019, 5:28am UTC](https://discuss.elastic.co/t/error-instance-beat-go-916-exiting-failed-to-import-dashboard/210362 "2019-12-09T05:28:24Z")
Hi, I'm trying to integrate Windows server to ELK using metric beat. But while loading or setting up the kibana dashboards facing the below ERR. Please help me fix this. Thanks 2019-12-03T17:16:50.507+0530 ERROR i… --- ## [Is is possible to run Elasticsearch 6 in a backward compatible mode](https://discuss.elastic.co/t/is-is-possible-to-run-elasticsearch-6-in-a-backward-compatible-mode/113211)
**Author:** [@pk.241011](https://discuss.elastic.co/u/pk.241011)\ **Replies:** 2\ **Last updated:** [December 26, 2017, 5:08pm UTC](https://discuss.elastic.co/t/is-is-possible-to-run-elasticsearch-6-in-a-backward-compatible-mode/113211 "2017-12-26T17:08:17Z")
Hi, We recently upgraded the UAT setup (which is also used by the devs) to 6.1. An immediate consequence was that the Serilog sink for Elasticsearch stopped working. From the details it seems like it is the string get… --- ## [Error "Ignoring ffi-1.9.13 because its extensions are not built"](https://discuss.elastic.co/t/error-ignoring-ffi-1-9-13-because-its-extensions-are-not-built/56166)
**Author:** [@Saurabh\_Jambhule](https://discuss.elastic.co/u/Saurabh_Jambhule)\ **Replies:** 2\ **Last updated:** [July 25, 2016, 4:02pm UTC](https://discuss.elastic.co/t/error-ignoring-ffi-1-9-13-because-its-extensions-are-not-built/56166 "2016-07-25T16:02:35Z")
I am getting error while installing/ updating plugin logstash-input-beats as: "Ignoring ffi-1.9.13 because its extensions are not built. Try: gem pristine ffi --version 1.9.13" But when do that (gem pristine ffi --v… --- ## [Python SocketHandler charset](https://discuss.elastic.co/t/python-sockethandler-charset/105197)
**Author:** [@a8j8i8t8](https://discuss.elastic.co/u/a8j8i8t8)\ **Replies:** 3\ **Last updated:** [October 25, 2017, 9:44am UTC](https://discuss.elastic.co/t/python-sockethandler-charset/105197 "2017-10-25T09:44:40Z")
Hello, I'm using Python SocketHandler to send logs over UDP port to Logstash. My Logstash input config is like below: - input { udp { port =\> 33333 type =\> "test" } } And my python logging config is as be… --- ## [Is there a way to change the name of the default marvel index](https://discuss.elastic.co/t/is-there-a-way-to-change-the-name-of-the-default-marvel-index/2437)
**Author:** [@vangap](https://discuss.elastic.co/u/vangap)\ **Replies:** 3\ **Last updated:** [November 18, 2016, 9:17am UTC](https://discuss.elastic.co/t/is-there-a-way-to-change-the-name-of-the-default-marvel-index/2437 "2016-11-18T09:17:17Z")
Use case is that I want to collect marvel data of different clusters to a single monitoring ES instance. It makes more sense to separate out the data which makes it easier to maintain and all. --- ## [More accurate date based scoring](https://discuss.elastic.co/t/more-accurate-date-based-scoring/20095)
**Author:** [@Jilles\_van\_Gurp](https://discuss.elastic.co/u/Jilles_van_Gurp)\ **Replies:** 3\ **Last updated:** [October 7, 2014, 8:16am UTC](https://discuss.elastic.co/t/more-accurate-date-based-scoring/20095 "2014-10-07T08:16:38Z")
PUT /test/test/1 { "date":"2013-04-01T00:00:00Z" } PUT /test/test/2 { "date":"2013-04-01T00:00:01Z" } PUT /test/test/3 { "date":"2013-04-01T00:00:03Z" } PUT /test/test/4 { "date":"2013-04-01T0… --- ## [Filebeat consuming high I/O operations for smaller files](https://discuss.elastic.co/t/filebeat-consuming-high-i-o-operations-for-smaller-files/308105)
**Author:** [@diptesh2007](https://discuss.elastic.co/u/diptesh2007)\ **Replies:** 8\ **Last updated:** [August 4, 2022, 7:59am UTC](https://discuss.elastic.co/t/filebeat-consuming-high-i-o-operations-for-smaller-files/308105 "2022-08-04T07:59:39Z")
I have the following architecture: Files (\*.json) of ~1-5 KB gets written to a folder throughout the day where file beat is scanning with a frequency of 10s. A json file once written in the file system will never be up… --- ## [First attempt - rollover using filters - extra keys not allowed @ data\['filters'\]](https://discuss.elastic.co/t/first-attempt-rollover-using-filters-extra-keys-not-allowed-data-filters/163454)
**Author:** [@jroberts235](https://discuss.elastic.co/u/jroberts235)\ **Replies:** 8\ **Last updated:** [January 16, 2019, 2:42pm UTC](https://discuss.elastic.co/t/first-attempt-rollover-using-filters-extra-keys-not-allowed-data-filters/163454 "2019-01-16T14:42:30Z")
curator, version 5.6.0 rollover.yaml: --- actions: 1: action: rollover description: \>- Rollover the index associated with alias 'aliasname', which should be in the format of prefix-000001 (or sim… --- ## [Incorrect month in Elasticsearch date\_histogram](https://discuss.elastic.co/t/incorrect-month-in-elasticsearch-date-histogram/154561)
**Author:** [@alinaqi306](https://discuss.elastic.co/u/alinaqi306)\ **Replies:** 4\ **Last updated:** [October 31, 2018, 6:20am UTC](https://discuss.elastic.co/t/incorrect-month-in-elasticsearch-date-histogram/154561 "2018-10-31T06:20:39Z")
My Document looks like below: { "\_index": "rep\_cdr", "\_type": "doc", "\_id": "TaArd2YBDRXNehCp7GmW", "\_score": 1, "\_source": { "level": "info", "@version": "1", "thirdPartyTime": 139… --- ## [Pipelined Histogram Aggregation?](https://discuss.elastic.co/t/pipelined-histogram-aggregation/63783)
**Author:** [@Buck\_Evan](https://discuss.elastic.co/u/Buck_Evan)\ **Replies:** 4\ **Last updated:** [October 27, 2016, 8:11pm UTC](https://discuss.elastic.co/t/pipelined-histogram-aggregation/63783 "2016-10-27T20:11:05Z")
Our raw data looks like so: {"name": "job1", "status":"running"} {"name": "job1", "status":"failed"} {"name": "job1", "status":"running"} {"name": "job1", "status":"passed"} {"name": "job2", "status":"running"} {"name"… --- ## [How to show custom data in alerts messages in Kibana](https://discuss.elastic.co/t/how-to-show-custom-data-in-alerts-messages-in-kibana/282777)
**Author:** [@abhinav3](https://discuss.elastic.co/u/abhinav3)\ **Replies:** 6\ **Last updated:** [August 31, 2021, 4:57am UTC](https://discuss.elastic.co/t/how-to-show-custom-data-in-alerts-messages-in-kibana/282777 "2021-08-31T04:57:09Z")
Hi I have a below data coming to elasticsearch: { "Data": { "WiFiIP": "N/A", "signal\_strength": "N/A", "signal\_percent": 0, "signal\_level": "N/A", "CPU": 10, "cpu\_temp": 47.0, "Internet": true, "Publis… --- ## [Data Loss in Elasticsearch](https://discuss.elastic.co/t/data-loss-in-elasticsearch/180249)
**Author:** [@Vinay\_G](https://discuss.elastic.co/u/Vinay_G)\ **Replies:** 6\ **Last updated:** [May 10, 2019, 3:17pm UTC](https://discuss.elastic.co/t/data-loss-in-elasticsearch/180249 "2019-05-10T15:17:22Z")
Hi, I have a Realtime Streaming Application where we are Updating Elasticsearch index on realtime. Currently the issue we are facing is data loss in Elasticsearch, please see below example scenario explaining what happ… --- ## [Different results when running curator command at command prompt vs as a .bat file in windows](https://discuss.elastic.co/t/different-results-when-running-curator-command-at-command-prompt-vs-as-a-bat-file-in-windows/31804)
**Author:** [@casieowen](https://discuss.elastic.co/u/casieowen)\ **Replies:** 5\ **Last updated:** [October 15, 2015, 3:32am UTC](https://discuss.elastic.co/t/different-results-when-running-curator-command-at-command-prompt-vs-as-a-bat-file-in-windows/31804 "2015-10-15T03:32:50Z")
Hi, Having an issue where I'm seeing different results when I run a curator command as a .bat file than I do when I run the same command manually at a command prompt in windows. If I run the below manually at a comma… --- ## [How can i save disk space in elasticsearch](https://discuss.elastic.co/t/how-can-i-save-disk-space-in-elasticsearch/127782)
**Author:** [@raja\_gopal](https://discuss.elastic.co/u/raja_gopal)\ **Replies:** 2\ **Last updated:** [April 13, 2018, 1:11pm UTC](https://discuss.elastic.co/t/how-can-i-save-disk-space-in-elasticsearch/127782 "2018-04-13T13:11:24Z")
I have a three nodes cluster each of 114 GB disk capacity. I am pushing syslog events from around 190 devices to this server. The events flow at a rate of 100k withing 15 mins. The index has 5 shards and uses best\_compre… --- ## [URL with special characters when searched not working in ElasticSearch 5.2.2](https://discuss.elastic.co/t/url-with-special-characters-when-searched-not-working-in-elasticsearch-5-2-2/96552)
**Author:** [@abhisekdg](https://discuss.elastic.co/u/abhisekdg)\ **Replies:** 2\ **Last updated:** [August 10, 2017, 8:15am UTC](https://discuss.elastic.co/t/url-with-special-characters-when-searched-not-working-in-elasticsearch-5-2-2/96552 "2017-08-10T08:15:43Z")
I am not able to search URL’s which contains special characters like http://example.sample.com/guide/Analyzers\_Terms\_and\_Analysis\_(ABC)\_Guide Suppose I have indexed 4 noteText http://example.sample.com/guide/Analyzer… --- ## [Issue when sending email alert on some particular event using gmail smtp server](https://discuss.elastic.co/t/issue-when-sending-email-alert-on-some-particular-event-using-gmail-smtp-server/57306)
**Author:** [@r1kumar](https://discuss.elastic.co/u/r1kumar)\ **Replies:** 2\ **Last updated:** [August 10, 2016, 4:32am UTC](https://discuss.elastic.co/t/issue-when-sending-email-alert-on-some-particular-event-using-gmail-smtp-server/57306 "2016-08-10T04:32:27Z")
Hi, I am facing problem when trying to send email alert on particular event using gmail smtp, Below is my email configuration inside output block following exception. output { email { port =\> 58… --- ## [\_grokparsefailure when parsing IIS logs if the %{URIPATH:page} has square brackets \[\] in it](https://discuss.elastic.co/t/-grokparsefailure-when-parsing-iis-logs-if-the-uripath-page-has-square-brackets-in-it/33416)
**Author:** [@mc1903](https://discuss.elastic.co/u/mc1903)\ **Replies:** 2\ **Last updated:** [October 31, 2015, 10:30pm UTC](https://discuss.elastic.co/t/-grokparsefailure-when-parsing-iis-logs-if-the-uripath-page-has-square-brackets-in-it/33416 "2015-10-31T22:30:15Z")
Hi, 3rd day after I installed ELK - so I am still very new at all this. I have noticed that some of my IIS log files have \[\] (square brackets?) in the %{URIPATH:page} and this is causing a \_grokparsefailure. My GRO… --- ## [Setup elasticsearch get killed](https://discuss.elastic.co/t/setup-elasticsearch-get-killed/70845)
**Author:** [@potter](https://discuss.elastic.co/u/potter)\ **Replies:** 3\ **Last updated:** [January 9, 2017, 2:03am UTC](https://discuss.elastic.co/t/setup-elasticsearch-get-killed/70845 "2017-01-09T02:03:23Z")
install on centos with jdk1.8 and es 5.1,when I enter the ./bin /elasticsearch ,just get killed ,not other logging information . Can one get the tips ,thanks [Previous page](https://discuss.elastic.co/top.md?page=914&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=916&per_page=50&period=all)