# Top

**URL:** https://discuss.elastic.co/top.md?page=916&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 917

---

## [Lucene Date Range Query in Kibana](https://discuss.elastic.co/t/lucene-date-range-query-in-kibana/17284)

<div class="topic-metadata">

**Author:** [@Uli\_Bethke](https://discuss.elastic.co/u/Uli_Bethke)\
**Replies:** 1\
**Last updated:** [April 30, 2014, 6:58pm UTC](https://discuss.elastic.co/t/lucene-date-range-query-in-kibana/17284 "2014-04-30T18:58:22Z")

</div>

Is there a way in Kibana or Lucene to define a date range query as Today-60 days. Something along the logical lines of visit\_date: \[\*-60 TO \*\] -- You received this message because you are subscribed to the Goo…

---

## [Reading structured streaming data from Elasticsearch into Spark using Python](https://discuss.elastic.co/t/reading-structured-streaming-data-from-elasticsearch-into-spark-using-python/298815)

<div class="topic-metadata">

**Author:** [@saurab](https://discuss.elastic.co/u/saurab)\
**Replies:** 2\
**Last updated:** [March 4, 2022, 4:34pm UTC](https://discuss.elastic.co/t/reading-structured-streaming-data-from-elasticsearch-into-spark-using-python/298815 "2022-03-04T16:34:13Z")

</div>

I believe Elasticsearch supports Spark Structured Streaming since version 6. I have seen examples of WRITING structured streaming data from spark to Elasticsearch in append mode. But I have not seen a single example of r…

---

## [Parsing JSON fields](https://discuss.elastic.co/t/parsing-json-fields/53012)

<div class="topic-metadata">

**Author:** [@fhasanaj](https://discuss.elastic.co/u/fhasanaj)\
**Replies:** 2\
**Last updated:** [June 16, 2016, 6:29pm UTC](https://discuss.elastic.co/t/parsing-json-fields/53012 "2016-06-16T18:29:20Z")

</div>

Hello I am trying to get a nested field from JSON to display as a field on it's own. So as it is shown below I would like the rosapi\_app\_name to be a field on it's own. (fyi inner\_hits was a field from a DSL query search…

---

## [Develop a KPI interface with ElasticSearch and ..?](https://discuss.elastic.co/t/develop-a-kpi-interface-with-elasticsearch-and/50866)

<div class="topic-metadata">

**Author:** [@gigouni](https://discuss.elastic.co/u/gigouni)\
**Replies:** 2\
**Last updated:** [May 30, 2016, 7:10am UTC](https://discuss.elastic.co/t/develop-a-kpi-interface-with-elasticsearch-and/50866 "2016-05-30T07:10:22Z")

</div>

Hello everyone. I'm currently working on a new project with ElasticSearch. I still didn't know anything about ES last night and I will need to use it for my internship. I would like the point of view of the community a…

---

## [How could I do to set es query case sensitive?](https://discuss.elastic.co/t/how-could-i-do-to-set-es-query-case-sensitive/118171)

<div class="topic-metadata">

**Author:** [@xuanyetouci](https://discuss.elastic.co/u/xuanyetouci)\
**Replies:** 4\
**Last updated:** [February 2, 2018, 9:25am UTC](https://discuss.elastic.co/t/how-could-i-do-to-set-es-query-case-sensitive/118171 "2018-02-02T09:25:47Z")

</div>

GET \_search { "query": { "match": { "name": "3g" } } } now I can get named 3g and 3G how counld I do to only get named 3g?

---

## [TSVB Aggregation filter](https://discuss.elastic.co/t/tsvb-aggregation-filter/275477)

<div class="topic-metadata">

**Author:** [@sam3546](https://discuss.elastic.co/u/sam3546)\
**Replies:** 5\
**Last updated:** [June 29, 2021, 4:18pm UTC](https://discuss.elastic.co/t/tsvb-aggregation-filter/275477 "2021-06-29T16:18:58Z")

</div>

I want to show a gauge with a value that is calculated via an aggregation, the issue is i want the aggregations to be based on a filter, such that I have a count value that is (number of docs with attribute:A) I have a…

---

## [How to check length of an array field in logstash](https://discuss.elastic.co/t/how-to-check-length-of-an-array-field-in-logstash/327625)

<div class="topic-metadata">

**Author:** [@yuswanul](https://discuss.elastic.co/u/yuswanul)\
**Replies:** 8\
**Last updated:** [March 16, 2023, 1:12am UTC](https://discuss.elastic.co/t/how-to-check-length-of-an-array-field-in-logstash/327625 "2023-03-16T01:12:14Z")

</div>

Hey everyone, can you give me some example about pipeline config to check if an array field is not null? and how i combine it with if else? i already made config like this and i want to create some if statement under…

---

## [Elastic Search nodes spitting Unrecognized SSL message error](https://discuss.elastic.co/t/elastic-search-nodes-spitting-unrecognized-ssl-message-error/306720)

<div class="topic-metadata">

**Author:** [@krishnav1](https://discuss.elastic.co/u/krishnav1)\
**Replies:** 3\
**Last updated:** [June 9, 2022, 7:34am UTC](https://discuss.elastic.co/t/elastic-search-nodes-spitting-unrecognized-ssl-message-error/306720 "2022-06-09T07:34:43Z")

</div>

Hello, I have Elasticsearch installed along with Fluentbit and Kibana in our kubernetes cluster. Of late, We have a heavy loss of logs from the kubernetes nodes to the elastic indices and there by Kibana. I have been n…

---

## [Is Auditbeat a replacement for auditd in Linux?](https://discuss.elastic.co/t/is-auditbeat-a-replacement-for-auditd-in-linux/156926)

<div class="topic-metadata">

**Author:** [@Wanderer](https://discuss.elastic.co/u/Wanderer)\
**Replies:** 3\
**Last updated:** [November 15, 2018, 10:18pm UTC](https://discuss.elastic.co/t/is-auditbeat-a-replacement-for-auditd-in-linux/156926 "2018-11-15T22:18:07Z")

</div>

After reading this from the auditbeat docs it looks like it is saying it is a replacement for auditd in Linux. Is this the intended use case for auditbeat? When running Auditbeat with the auditd module enabled, you migh…

---

## [Parsing\_exception occured when i ues es with elastalert](https://discuss.elastic.co/t/parsing-exception-occured-when-i-ues-es-with-elastalert/108982)

<div class="topic-metadata">

**Author:** [@isummersing](https://discuss.elastic.co/u/isummersing)\
**Replies:** 3\
**Last updated:** [November 24, 2017, 7:59am UTC](https://discuss.elastic.co/t/parsing-exception-occured-when-i-ues-es-with-elastalert/108982 "2017-11-24T07:59:50Z")

</div>

here is my exceptions: RequestError: TransportError(400, u'parsing\_exception', u'Unknown key for a START\_OBJECT in \[filter\].') WARNING:elasticsearch:GET http://127.0.0.1:9200/logstash-\*/\_search?\_source\_include=%40times…

---

## [Kibana "Discover: "\*\*\*" is not a configured pattern](https://discuss.elastic.co/t/kibana-discover-is-not-a-configured-pattern/100639)

<div class="topic-metadata">

**Author:** [@mikeda](https://discuss.elastic.co/u/mikeda)\
**Replies:** 3\
**Last updated:** [September 20, 2017, 7:59am UTC](https://discuss.elastic.co/t/kibana-discover-is-not-a-configured-pattern/100639 "2017-09-20T07:59:33Z")

</div>

kibana 5.4.1を使用しています。 kibanaを起動すると、 "Discover: "AAA" is not a configured pattern. Using the default index pattern とワーニング表示されてしまいます。 index(AAA)は、elasticsearchには存在していませんし、 kibanaにも登録していないため、Discoverのindex一覧や、index pat…

---

## [Create repository with ES 1.7.4 with with no delete access to IAMCONSOLE?](https://discuss.elastic.co/t/create-repository-with-es-1-7-4-with-with-no-delete-access-to-iamconsole/41631)

<div class="topic-metadata">

**Author:** [@Vishal\_Singh1](https://discuss.elastic.co/u/Vishal_Singh1)\
**Replies:** 8\
**Last updated:** [February 16, 2016, 8:14pm UTC](https://discuss.elastic.co/t/create-repository-with-es-1-7-4-with-with-no-delete-access-to-iamconsole/41631 "2016-02-16T20:14:10Z")

</div>

Is there anyway to create repository on S3 using ES 1.7.4 with access, that does not have delete permission? We do not want to give delete permission to every user in our company.

---

## [Completion mapping type throws a misleading error on null value](https://discuss.elastic.co/t/completion-mapping-type-throws-a-misleading-error-on-null-value/17580)

<div class="topic-metadata">

**Author:** [@Glade\_Luco](https://discuss.elastic.co/u/Glade_Luco)\
**Replies:** 3\
**Last updated:** [August 25, 2014, 12:41pm UTC](https://discuss.elastic.co/t/completion-mapping-type-throws-a-misleading-error-on-null-value/17580 "2014-08-25T12:41:09Z")

</div>

I'm implementing an autocomplete feature using the new(ish) completion type. We are implementing it against a series of fields, and in some cases one of the fields is null. When the field is null, the completion …

---

## [Best specification server](https://discuss.elastic.co/t/best-specification-server/262585)

<div class="topic-metadata">

**Author:** [@alipujaistopo](https://discuss.elastic.co/u/alipujaistopo)\
**Replies:** 6\
**Last updated:** [February 8, 2021, 6:03pm UTC](https://discuss.elastic.co/t/best-specification-server/262585 "2021-02-08T18:03:33Z")

</div>

hi guys, i have a project to make a SIEM using ELK. and it will be separate 5 server. 3 server for Elasticsearch, 1 server for Kibana, and 1 server for Logstash can you guys help me with the most ideal spec for all the…

---

## [Wildfly 10 trace.id and transaction.id](https://discuss.elastic.co/t/wildfly-10-trace-id-and-transaction-id/234315)

<div class="topic-metadata">

**Author:** [@stessy](https://discuss.elastic.co/u/stessy)\
**Replies:** 6\
**Last updated:** [June 1, 2020, 6:36am UTC](https://discuss.elastic.co/t/wildfly-10-trace-id-and-transaction-id/234315 "2020-06-01T06:36:51Z")

</div>

APM Agent language and version: Java Agent 1.16.0 Hi, we are currently setting distributed tracing between our µservices and our legacy application. Our µservices are based on spring boot. So no real problem excepted …

---

## [Indexing mails to elasticsearch](https://discuss.elastic.co/t/indexing-mails-to-elasticsearch/128482)

<div class="topic-metadata">

**Author:** [@rouchad\_rouchad](https://discuss.elastic.co/u/rouchad_rouchad)\
**Replies:** 6\
**Last updated:** [April 29, 2018, 11:00am UTC](https://discuss.elastic.co/t/indexing-mails-to-elasticsearch/128482 "2018-04-29T11:00:32Z")

</div>

please i need ur help i can't index my emails into elastic search C:\\elk\\logstash\\bin\>logstash -f parsemail.conf --config.reload.automatic Sending Logstash's logs to C:/elk/logstash/logs which is now configured via log…

---

## [Node processors](https://discuss.elastic.co/t/node-processors/273803)

<div class="topic-metadata">

**Author:** [@Cristian1988](https://discuss.elastic.co/u/Cristian1988)\
**Replies:** 7\
**Last updated:** [July 17, 2021, 12:59am UTC](https://discuss.elastic.co/t/node-processors/273803 "2021-07-17T00:59:40Z")

</div>

Estoy teniendo algunos rechazos a la hora de lanzar un bulk contra un elàstic y se producen con más frecuencia desde que subimos de versión de una versión 6 a una 7, revisando settings y mappings de todo el clúster, de u…

---

## [Redis in elk](https://discuss.elastic.co/t/redis-in-elk/262076)

<div class="topic-metadata">

**Author:** [@Tuckson](https://discuss.elastic.co/u/Tuckson)\
**Replies:** 7\
**Last updated:** [January 29, 2021, 3:22pm UTC](https://discuss.elastic.co/t/redis-in-elk/262076 "2021-01-29T15:22:21Z")

</div>

Hi, I have this elk stack running, 8 datanodes, 4 ingestnodes, 4 logstashes en a shitload of applications that send data from multiple servers via filebeat. The size of these applications vary from 4 servers to 24 on …

---

## [How to generate server certificate for Kibana?](https://discuss.elastic.co/t/how-to-generate-server-certificate-for-kibana/122166)

<div class="topic-metadata">

**Author:** [@zachy](https://discuss.elastic.co/u/zachy)\
**Replies:** 1\
**Last updated:** [March 4, 2018, 8:36pm UTC](https://discuss.elastic.co/t/how-to-generate-server-certificate-for-kibana/122166 "2018-03-04T20:36:37Z")

</div>

Hi I am reading through the docs here: https://www.elastic.co/guide/en/kibana/6.2/monitoring-xpack-kibana.html Under point 4, it says to generate a server certificate for Kibana. How do I do this? Is it the exact same…

---

## [Kibana dashboard using Html or React](https://discuss.elastic.co/t/kibana-dashboard-using-html-or-react/317494)

<div class="topic-metadata">

**Author:** [@Shashank02](https://discuss.elastic.co/u/Shashank02)\
**Replies:** 2\
**Last updated:** [October 27, 2022, 6:18am UTC](https://discuss.elastic.co/t/kibana-dashboard-using-html-or-react/317494 "2022-10-27T06:18:04Z")

</div>

So, I'm new to this and I want some help regarding KIBANA. So, in Kibana I've built a dashboard and now, I'm creating a webpage using react. So, by this, I want to ask whether we can connect the Kibana dashboard to the R…

---

## [Kibana Dashboard - Unexpected token u in JSON at position 0](https://discuss.elastic.co/t/kibana-dashboard-unexpected-token-u-in-json-at-position-0/233674)

<div class="topic-metadata">

**Author:** [@BALA\_BALA](https://discuss.elastic.co/u/BALA_BALA)\
**Replies:** 2\
**Last updated:** [May 22, 2020, 8:27am UTC](https://discuss.elastic.co/t/kibana-dashboard-unexpected-token-u-in-json-at-position-0/233674 "2020-05-22T08:27:21Z")

</div>

Hi Team, After we upgraded from 7.5.6 to 7.6.2 we are facing issue while try to load more than 90 days of data in Kibana, it fails with the following error : Error in visualisation \[esaggs\] \> Unexpected token u in JSO…

---

## [Geoip.location is not displaying in kibana when set up in logstash conf](https://discuss.elastic.co/t/geoip-location-is-not-displaying-in-kibana-when-set-up-in-logstash-conf/206980)

<div class="topic-metadata">

**Author:** [@Apollyon](https://discuss.elastic.co/u/Apollyon)\
**Replies:** 2\
**Last updated:** [November 7, 2019, 4:57pm UTC](https://discuss.elastic.co/t/geoip-location-is-not-displaying-in-kibana-when-set-up-in-logstash-conf/206980 "2019-11-07T16:57:16Z")

</div>

hello, I am on ELK 7.4. When using geoip in a Logstash conf the geoip.location doesn't appear to be displayed in the index fields in Kibana. Below is the Logstash conf - showing the fields filter input under the geoip …

---

## [Saved queries have gone missing in Kibana](https://discuss.elastic.co/t/saved-queries-have-gone-missing-in-kibana/111407)

<div class="topic-metadata">

**Author:** [@byoungman](https://discuss.elastic.co/u/byoungman)\
**Replies:** 2\
**Last updated:** [December 12, 2017, 8:39pm UTC](https://discuss.elastic.co/t/saved-queries-have-gone-missing-in-kibana/111407 "2017-12-12T20:39:44Z")

</div>

We recently lost all of our indexes in Elastic (I accidentally deleted them) and am in the process of rebuilding them but a developer on my team came up to me this morning and informed me that all of the queries that he …

---

## [Make one visualization per day automaticly](https://discuss.elastic.co/t/make-one-visualization-per-day-automaticly/53759)

<div class="topic-metadata">

**Author:** [@Kevin\_Csuka](https://discuss.elastic.co/u/Kevin_Csuka)\
**Replies:** 2\
**Last updated:** [June 23, 2016, 3:53pm UTC](https://discuss.elastic.co/t/make-one-visualization-per-day-automaticly/53759 "2016-06-23T15:53:24Z")

</div>

Hi, Is it possible to make Kibana add one visualization per day automatically. Use case: I've got a test running 24/7, which inputs data into Kibana. It would be handy to have a dashboard which shows data from eve…

---

## [Multiple Blocklists?](https://discuss.elastic.co/t/multiple-blocklists/279196)

<div class="topic-metadata">

**Author:** [@BionicSecurityMgr](https://discuss.elastic.co/u/BionicSecurityMgr)\
**Replies:** 1\
**Last updated:** [July 21, 2021, 4:48pm UTC](https://discuss.elastic.co/t/multiple-blocklists/279196 "2021-07-21T16:48:06Z")

</div>

Is there any way to use multiple block lists? I'm thinking of a situation where we can have different Block Lists for different groups of assets without the need to use multiple Endpoint servers. We had a bad hash cause…

---

## [SearchContextMissingException No search context found for id on bulk query](https://discuss.elastic.co/t/searchcontextmissingexception-no-search-context-found-for-id-on-bulk-query/163537)

<div class="topic-metadata">

**Author:** [@jmngpt](https://discuss.elastic.co/u/jmngpt)\
**Replies:** 1\
**Last updated:** [January 10, 2019, 3:34pm UTC](https://discuss.elastic.co/t/searchcontextmissingexception-no-search-context-found-for-id-on-bulk-query/163537 "2019-01-10T15:34:01Z")

</div>

I'm experiencing an issue on 5.6.4 during a bulk search composed of several match queries, over an index that is not being written to. Almost all queries in the batch end up timing out (after 1h), and I can't grasp the …

---

## [\[ERROR\]\[logstash.outputs.elasticsearch\] An unknown error occurred sending a bulk request to Elasticsearch](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-an-unknown-error-occurred-sending-a-bulk-request-to-elasticsearch/101107)

<div class="topic-metadata">

**Author:** [@Nikhil\_Jaiswal](https://discuss.elastic.co/u/Nikhil_Jaiswal)\
**Replies:** 1\
**Last updated:** [September 20, 2017, 9:56am UTC](https://discuss.elastic.co/t/error-logstash-outputs-elasticsearch-an-unknown-error-occurred-sending-a-bulk-request-to-elasticsearch/101107 "2017-09-20T09:56:06Z")

</div>

Hi, I am getting this error while running logstash, i am not able to rectify the issue from this log, after running configtest , i am getting Configuration Ok message in screen. \[2017-09-20T11:33:29,335\]\[ERROR\]\[logstas…

---

## [Encountered file conflicts when upgrading to elasticsearch 2.1.1](https://discuss.elastic.co/t/encountered-file-conflicts-when-upgrading-to-elasticsearch-2-1-1/38135)

<div class="topic-metadata">

**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\
**Replies:** 1\
**Last updated:** [February 29, 2016, 5:47am UTC](https://discuss.elastic.co/t/encountered-file-conflicts-when-upgrading-to-elasticsearch-2-1-1/38135 "2016-02-29T05:47:30Z")

</div>

Hi, when I tried to upgrade to elasticsearch 2.1.1, following messages were displayed. what's the best way to move forward? Thanks a lot! warning: elasticsearch-2.1.1.rpm: Header V4 RSA/SHA1 Signature, key ID d88e42b4: N…

---

## [How to curl this query to shell script](https://discuss.elastic.co/t/how-to-curl-this-query-to-shell-script/299292)

<div class="topic-metadata">

**Author:** [@leyleynewt](https://discuss.elastic.co/u/leyleynewt)\
**Replies:** 4\
**Last updated:** [March 14, 2022, 2:30am UTC](https://discuss.elastic.co/t/how-to-curl-this-query-to-shell-script/299292 "2022-03-14T02:30:03Z")

</div>

I want to delete the 5 days old data of all my indexes. How to curl this query to shell script POST \_all/\_delete\_by\_query { "query": { "range": { "@timestamp": { "lte": "now-5d" } } } } Than…

---

## [NoClassDefFoundError: org/apache/solr/client/solrj/impl/HttpSolrServer when using elasticsearch-river-solr](https://discuss.elastic.co/t/noclassdeffounderror-org-apache-solr-client-solrj-impl-httpsolrserver-when-using-elasticsearch-river-solr/10647)

<div class="topic-metadata">

**Author:** [@Way\_Cool](https://discuss.elastic.co/u/Way_Cool)\
**Replies:** 4\
**Last updated:** [February 7, 2013, 4:44pm UTC](https://discuss.elastic.co/t/noclassdeffounderror-org-apache-solr-client-solrj-impl-httpsolrserver-when-using-elasticsearch-river-solr/10647 "2013-02-07T16:44:37Z")

</div>

Hi, guys, Do you see the following error after installing elasticsearch-river-solr plugin? { \_index: \_river \_type: solr\_river \_id: \_status \_version: 2 \_score: 1 \_source: { …

---

## [Kubernetes labels are missing in pod and container metricsets](https://discuss.elastic.co/t/kubernetes-labels-are-missing-in-pod-and-container-metricsets/195505)

<div class="topic-metadata">

**Author:** [@asp](https://discuss.elastic.co/u/asp)\
**Replies:** 3\
**Last updated:** [August 30, 2019, 1:41pm UTC](https://discuss.elastic.co/t/kubernetes-labels-are-missing-in-pod-and-container-metricsets/195505 "2019-08-30T13:41:36Z")

</div>

Hi, I am currently evaluating different approaches to filter filter for deployments / statefulsets and show the child pods and containers including their metrics. I noticed that in all metricsets having the prefix sta…

---

## [Complex calculations and table view format](https://discuss.elastic.co/t/complex-calculations-and-table-view-format/219045)

<div class="topic-metadata">

**Author:** [@nino](https://discuss.elastic.co/u/nino)\
**Replies:** 6\
**Last updated:** [March 5, 2020, 8:57am UTC](https://discuss.elastic.co/t/complex-calculations-and-table-view-format/219045 "2020-03-05T08:57:09Z")

</div>

Hello all, i would like to know if this kind of tables can be done with kibana and add it to a dasboard. What is the best approach to achieve this? Index structure { "gain\_loss" =\> " 1,011.53", "@tim…

---

## [Gc overhead while index data using logstash](https://discuss.elastic.co/t/gc-overhead-while-index-data-using-logstash/171268)

<div class="topic-metadata">

**Author:** [@Rajesh\_Verma](https://discuss.elastic.co/u/Rajesh_Verma)\
**Replies:** 6\
**Last updated:** [March 22, 2019, 10:50am UTC](https://discuss.elastic.co/t/gc-overhead-while-index-data-using-logstash/171268 "2019-03-22T10:50:26Z")

</div>

System config: Ram: 16 gb, 1tb Harddrive, I am trying to index the around 2.5 crore using multi pipe line configuration using logstash Running nine pipeline id which created the 45 index in single node with 5 shards…

---

## [Detection rule for password spraying attempts](https://discuss.elastic.co/t/detection-rule-for-password-spraying-attempts/256628)

<div class="topic-metadata">

**Author:** [@heading](https://discuss.elastic.co/u/heading)\
**Replies:** 2\
**Last updated:** [November 26, 2020, 2:18pm UTC](https://discuss.elastic.co/t/detection-rule-for-password-spraying-attempts/256628 "2020-11-26T14:18:43Z")

</div>

Hi, we have a use case where we want to detect if a host tries to log on to a certain number of different users. With threshold rules we are only able to detect a specific number of login attempts by a host. We cannot e…

---

## [Panic: reflect: call of reflect.Value.Int on zero Value](https://discuss.elastic.co/t/panic-reflect-call-of-reflect-value-int-on-zero-value/135705)

<div class="topic-metadata">

**Author:** [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)\
**Replies:** 2\
**Last updated:** [June 13, 2018, 3:37pm UTC](https://discuss.elastic.co/t/panic-reflect-call-of-reflect-value-int-on-zero-value/135705 "2018-06-13T15:37:37Z")

</div>

Hi, Having trouble getting started with heartbeat. I'd like it to ping another host. Here's my setup: $ sudo cat heartbeat.yml | sed -e '/^ \*#/d; /^ \*$/d' heartbeat.monitors: - type: icmp schedule: '\*…

---

## [Route indexing requests to a specific node instead of a shard](https://discuss.elastic.co/t/route-indexing-requests-to-a-specific-node-instead-of-a-shard/277939)

<div class="topic-metadata">

**Author:** [@Joel4](https://discuss.elastic.co/u/Joel4)\
**Replies:** 8\
**Last updated:** [July 6, 2021, 1:09pm UTC](https://discuss.elastic.co/t/route-indexing-requests-to-a-specific-node-instead-of-a-shard/277939 "2021-07-06T13:09:00Z")

</div>

Hi, I searched through the docs but I could not find a way to route index requests to a specific node, instead of a specific shard. If routing to a specific node is not possible, then is it possible to create shard-node…

---

## [Java: cannot find symbol class RestHighLevelClient](https://discuss.elastic.co/t/java-cannot-find-symbol-class-resthighlevelclient/274028)

<div class="topic-metadata">

**Author:** [@pinto](https://discuss.elastic.co/u/pinto)\
**Replies:** 1\
**Last updated:** [May 26, 2021, 9:57am UTC](https://discuss.elastic.co/t/java-cannot-find-symbol-class-resthighlevelclient/274028 "2021-05-26T09:57:42Z")

</div>

Following Java High Level REST Client Getting started documentation. Added to the POM.xml (in IntelliJ): \<project\> ... \<dependencies\> \<dependency\> \<groupId\>org.elasticsearch.client\</groupId\> …

---

## [How to capture the Logj4 logs created in java service to APM Server](https://discuss.elastic.co/t/how-to-capture-the-logj4-logs-created-in-java-service-to-apm-server/236023)

<div class="topic-metadata">

**Author:** [@Mohan\_vel](https://discuss.elastic.co/u/Mohan_vel)\
**Replies:** 7\
**Last updated:** [June 16, 2020, 6:15am UTC](https://discuss.elastic.co/t/how-to-capture-the-logj4-logs-created-in-java-service-to-apm-server/236023 "2020-06-16T06:15:55Z")

</div>

Elastic, Kibana, APM version : 7.7.0 APM java agent version - 1.16.0: Chrome latest: Created SAAS elastic cloud acct: \*\*Fresh install \*\* \*\*Is there anything special in your setup?\*\*NO. I have created a java service…

---

## [Log parse pattern for Kafka & ZooKeeper](https://discuss.elastic.co/t/log-parse-pattern-for-kafka-zookeeper/28442)

<div class="topic-metadata">

**Author:** [@Anirban\_Mukherjee](https://discuss.elastic.co/u/Anirban_Mukherjee)\
**Replies:** 1\
**Last updated:** [September 12, 2015, 6:53pm UTC](https://discuss.elastic.co/t/log-parse-pattern-for-kafka-zookeeper/28442 "2015-09-12T18:53:48Z")

</div>

Hi , Currently I am using a cluster of Zookeeper and Kafka . I would like to parse these logs through logstash . Is there any available pattern for these two types logs parsing ? Thanks, AM

---

## [6.2.0 - Some "Quick time ranges" have been removed](https://discuss.elastic.co/t/6-2-0-some-quick-time-ranges-have-been-removed/119076)

<div class="topic-metadata">

**Author:** [@quentin.legraverend](https://discuss.elastic.co/u/quentin.legraverend)\
**Replies:** 3\
**Last updated:** [February 9, 2018, 12:32pm UTC](https://discuss.elastic.co/t/6-2-0-some-quick-time-ranges-have-been-removed/119076 "2018-02-09T12:32:48Z")

</div>

Hi there, I upgraded my dev environnement in version 6.2.0 this morning and observed that some time ranges I used to select in "Quick" section are no longer available. Including "Yesterday" and "Day before yesterday" am…

---

## [Elastic search error - translog: Too many open files](https://discuss.elastic.co/t/elastic-search-error-translog-too-many-open-files/40892)

<div class="topic-metadata">

**Author:** [@Rahul](https://discuss.elastic.co/u/Rahul)\
**Replies:** 3\
**Last updated:** [March 16, 2016, 7:37pm UTC](https://discuss.elastic.co/t/elastic-search-error-translog-too-many-open-files/40892 "2016-03-16T19:37:12Z")

</div>

Hi, We are having 3 nodes cluster for ES. Based on suggestion from expert on creating indices, we have followed the approach that we will be having indices created date wise using template. With this approach we found ev…

---

## [Logstash SSL/TLS FREAK Vulnerability CVE-2015-5378](https://discuss.elastic.co/t/logstash-ssl-tls-freak-vulnerability-cve-2015-5378/26023)

<div class="topic-metadata">

**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\
**Replies:** 0\
**Last updated:** [July 21, 2015, 8:44pm UTC](https://discuss.elastic.co/t/logstash-ssl-tls-freak-vulnerability-cve-2015-5378/26023 "2015-07-21T20:44:44Z")

</div>

Logstash 1.5.2 and prior versions are vulnerable to a SSL/TLS security issue called the FREAK attack. If you are using the Lumberjack input, FREAK allows an attacker to successfully implement a man in the middle attack, …

---

## [Heatmap and Radio Signal strength value](https://discuss.elastic.co/t/heatmap-and-radio-signal-strength-value/196853)

<div class="topic-metadata">

**Author:** [@manunc](https://discuss.elastic.co/u/manunc)\
**Replies:** 4\
**Last updated:** [September 4, 2019, 10:26am UTC](https://discuss.elastic.co/t/heatmap-and-radio-signal-strength-value/196853 "2019-09-04T10:26:51Z")

</div>

Hello, I need advise to decide which is the best option in order to: create a geolocation heatmap displaying a radio signal strengh in dBm (from 0 to -140 dBm) I try to use MAPS functionnalities with grid aggregation …

---

## [Issue installing x-pack with logstash 5.2.1](https://discuss.elastic.co/t/issue-installing-x-pack-with-logstash-5-2-1/75785)

<div class="topic-metadata">

**Author:** [@vinodpattel](https://discuss.elastic.co/u/vinodpattel)\
**Replies:** 4\
**Last updated:** [February 24, 2017, 9:31pm UTC](https://discuss.elastic.co/t/issue-installing-x-pack-with-logstash-5-2-1/75785 "2017-02-24T21:31:47Z")

</div>

Hi, I installed logstash 5.2.1 & tried offline installation of x-pack 5.2.1. This seems to hang, with no progress on installation. x-pack-5.2.1.zip file was downloaded and placed in /var/tmp folder. ls -lrt /var/tmp/…

---

## [Mac installation of apm-agent-php](https://discuss.elastic.co/t/mac-installation-of-apm-agent-php/302987)

<div class="topic-metadata">

**Author:** [@webpatser](https://discuss.elastic.co/u/webpatser)\
**Replies:** 0\
**Last updated:** [April 22, 2022, 6:55am UTC](https://discuss.elastic.co/t/mac-installation-of-apm-agent-php/302987 "2022-04-22T06:55:15Z")

</div>

Hi, We use the default APM packages on ubuntu and the basic traces you get using laravel are awesome to start with. But to implement trace parents etc I want to compile the PHP APM agent on my dev Macbook. The basic co…

---

## [Logstash Error when starting up - EACCES - Permission denied - NUL](https://discuss.elastic.co/t/logstash-error-when-starting-up-eacces-permission-denied-nul/219424)

<div class="topic-metadata">

**Author:** [@peter.tu](https://discuss.elastic.co/u/peter.tu)\
**Replies:** 0\
**Last updated:** [February 14, 2020, 5:22pm UTC](https://discuss.elastic.co/t/logstash-error-when-starting-up-eacces-permission-denied-nul/219424 "2020-02-14T17:22:31Z")

</div>

When I start logstash, I get the following error: Logstash - java.lang.IllegalStateException: Logstash stopped processing because of an error: (EACCES) Permission denied - NUL It was working fine a couple of days ago,…

---

## [Elasticsearch (5.3) data nodes become unresponsive (gc overhead) when trying to add new index pattern in Kibana](https://discuss.elastic.co/t/elasticsearch-5-3-data-nodes-become-unresponsive-gc-overhead-when-trying-to-add-new-index-pattern-in-kibana/80518)

<div class="topic-metadata">

**Author:** [@letre](https://discuss.elastic.co/u/letre)\
**Replies:** 0\
**Last updated:** [March 29, 2017, 3:57pm UTC](https://discuss.elastic.co/t/elasticsearch-5-3-data-nodes-become-unresponsive-gc-overhead-when-trying-to-add-new-index-pattern-in-kibana/80518 "2017-03-29T15:57:30Z")

</div>

After the upgrade to 5.3 in a relatively simple setup the master node runs into timeouts (org.elasticsearch.transport.ReceiveTimeoutTransportException) when contacting the data nodes if we try to add a new index pattern …

---

## [Node settings must not contain any index level settings](https://discuss.elastic.co/t/node-settings-must-not-contain-any-index-level-settings/81529)

<div class="topic-metadata">

**Author:** [@Kernel\_Panic](https://discuss.elastic.co/u/Kernel_Panic)\
**Replies:** 1\
**Last updated:** [April 6, 2017, 8:44pm UTC](https://discuss.elastic.co/t/node-settings-must-not-contain-any-index-level-settings/81529 "2017-04-06T20:44:35Z")

</div>

Hi guys I'm sure this happed before, but please help me to understand something. I'm getting "node settings must not contain any index level settings" on the error log, ok, now in the logs it also says that I should …

---

## [Python API unhandled exception](https://discuss.elastic.co/t/python-api-unhandled-exception/54072)

<div class="topic-metadata">

**Author:** [@pinhasr](https://discuss.elastic.co/u/pinhasr)\
**Replies:** 1\
**Last updated:** [July 5, 2016, 9:38am UTC](https://discuss.elastic.co/t/python-api-unhandled-exception/54072 "2016-07-05T09:38:25Z")

</div>

Hi can any body know how to catch this exception it some time happen and same time not at mode debug it not happen thanks GET http://db1:9200/vg-signals/signal/\_search?from=0&fields=si\_id%2Csi\_coordination\_points%2C…

---

## [Indexing Email Archive file](https://discuss.elastic.co/t/indexing-email-archive-file/67924)

<div class="topic-metadata">

**Author:** [@xsallowed](https://discuss.elastic.co/u/xsallowed)\
**Replies:** 2\
**Last updated:** [December 5, 2016, 1:29pm UTC](https://discuss.elastic.co/t/indexing-email-archive-file/67924 "2016-12-05T13:29:19Z")

</div>

Hi I have got bulk of emails in an archive folder and want to index them through elasticsearch. what are the possible options/ methods available with me. Assuming that a lot of people here had already done that. Regard…

[Previous page](https://discuss.elastic.co/top.md?page=915&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=917&per_page=50&period=all)
