# Top **URL:** https://discuss.elastic.co/top.md?page=920&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 921 --- ## [How to integrate multiple config files in Logstash?](https://discuss.elastic.co/t/how-to-integrate-multiple-config-files-in-logstash/174763)
**Author:** [@vignesh.s2](https://discuss.elastic.co/u/vignesh.s2)\ **Replies:** 2\ **Last updated:** [April 8, 2019, 12:53pm UTC](https://discuss.elastic.co/t/how-to-integrate-multiple-config-files-in-logstash/174763 "2019-04-08T12:53:01Z")
As there are 2 config files in Logstash, logs are not received and forwarded to Kibana. I need to know whether i can have more than one conf file for logstash and if so, How to integrate the conf files. I have mentioned… --- ## [Elasticsearch Fills Logs with Error Messages When Shard Fails to Recover](https://discuss.elastic.co/t/elasticsearch-fills-logs-with-error-messages-when-shard-fails-to-recover/60951)
**Author:** [@tenhavenator](https://discuss.elastic.co/u/tenhavenator)\ **Replies:** 2\ **Last updated:** [September 21, 2016, 3:47pm UTC](https://discuss.elastic.co/t/elasticsearch-fills-logs-with-error-messages-when-shard-fails-to-recover/60951 "2016-09-21T15:47:03Z")
Elasticsearch version: 2.3.1 I am seeing an issue where Elasticsearch is filling up disk space (over 40GB) with error logging. Its the same exception over and over again: \[2016-08-16 15:59:57,827\]\[WARN \]\[cluster.acti… --- ## [Multi\_match and wildcard-or-regexp-or-prefix](https://discuss.elastic.co/t/multi-match-and-wildcard-or-regexp-or-prefix/13161)
**Author:** [@Costas\_Kotsokalis](https://discuss.elastic.co/u/Costas_Kotsokalis)\ **Replies:** 0\ **Last updated:** [August 10, 2013, 11:08am UTC](https://discuss.elastic.co/t/multi-match-and-wildcard-or-regexp-or-prefix/13161 "2013-08-10T11:08:07Z")
Hi, I've been trying, unsuccessfully, to build a query that combines a multi\_match with either a regexp or a wildcard or a prefix query. Is there a way to achieve this? Thanks in advance, Costas -- Yo… --- ## [Canvas not working with kibana 6.1.1](https://discuss.elastic.co/t/canvas-not-working-with-kibana-6-1-1/113498)
**Author:** [@jspeer](https://discuss.elastic.co/u/jspeer)\ **Replies:** 6\ **Last updated:** [January 2, 2018, 10:34pm UTC](https://discuss.elastic.co/t/canvas-not-working-with-kibana-6-1-1/113498 "2018-01-02T22:34:40Z")
Just tried to install canvas in my test env, receiving this error: Incorrect Kibana version in plugin \[canvas\]. Expected \[6.0.0\]; found \[6.1.1\] --- ## [Snapshot indices for last 7 days using Elasticsearch curator?](https://discuss.elastic.co/t/snapshot-indices-for-last-7-days-using-elasticsearch-curator/82172)
**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\ **Replies:** 6\ **Last updated:** [April 12, 2017, 8:04pm UTC](https://discuss.elastic.co/t/snapshot-indices-for-last-7-days-using-elasticsearch-curator/82172 "2017-04-12T20:04:15Z")
HI, How can i snapshot indices for past 7 days from today not older than that? IS that possible in curator? --- ## [OpenID Connect not parsing multi-value (array/list) user attributes](https://discuss.elastic.co/t/openid-connect-not-parsing-multi-value-array-list-user-attributes/212025)
**Author:** [@Chris\_Samo](https://discuss.elastic.co/u/Chris_Samo)\ **Replies:** 2\ **Last updated:** [December 16, 2019, 9:14pm UTC](https://discuss.elastic.co/t/openid-connect-not-parsing-multi-value-array-list-user-attributes/212025 "2019-12-16T21:14:30Z")
We've setup Elasticsearch (7.5.0) to provide authentication and authorisation using OpenID Connect (a Keycloak setup in this case). Within the OIDC provider, we've mapped a custom User Attribute to be present as a field … --- ## [Kibana won't parse field with date format from NIFI PutElastic Processor](https://discuss.elastic.co/t/kibana-wont-parse-field-with-date-format-from-nifi-putelastic-processor/131092)
**Author:** [@Bobby\_Harsono](https://discuss.elastic.co/u/Bobby_Harsono)\ **Replies:** 2\ **Last updated:** [May 18, 2018, 6:40am UTC](https://discuss.elastic.co/t/kibana-wont-parse-field-with-date-format-from-nifi-putelastic-processor/131092 "2018-05-18T06:40:02Z")
Good day, I failed to parse a field with string date in it in Kibana, below is the record sample taken from kibana dashboard {date:2018/05/08 16:51:25 +0700 id:f0692c8a-72bd-46ed-8eba-df1aae8c8c20 msisdn:628528484800 b… --- ## [Failed to installed pre-packaged rules from elastic](https://discuss.elastic.co/t/failed-to-installed-pre-packaged-rules-from-elastic/219111)
**Author:** [@wlzylal](https://discuss.elastic.co/u/wlzylal)\ **Replies:** 3\ **Last updated:** [February 13, 2020, 9:44am UTC](https://discuss.elastic.co/t/failed-to-installed-pre-packaged-rules-from-elastic/219111 "2020-02-13T09:44:07Z")
I have just upgrade my elk to 7.6.0 and I want to test the rules in SIEM, but I just can't load prebuilt detection rules. It said that // Your visualization has error(s) Failed to installed pre-packaged rules from elas… --- ## [How to configure Logstash to output to dynamic list of kafka bootstrap servers?](https://discuss.elastic.co/t/how-to-configure-logstash-to-output-to-dynamic-list-of-kafka-bootstrap-servers/203002)
**Author:** [@furiabhavesh](https://discuss.elastic.co/u/furiabhavesh)\ **Replies:** 3\ **Last updated:** [October 13, 2019, 3:27pm UTC](https://discuss.elastic.co/t/how-to-configure-logstash-to-output-to-dynamic-list-of-kafka-bootstrap-servers/203002 "2019-10-13T15:27:14Z")
We need to configure logstash to output to multiple kafka brokers whose list needs to be dynamic. We need to pass this list of kafka hosts as follows: docker run -e BOOTSTRAP\_SERVERS="host1:port1,host2:port2,hostn:port… --- ## [Dashboard not showing data & request failed](https://discuss.elastic.co/t/dashboard-not-showing-data-request-failed/128305)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 3\ **Last updated:** [April 18, 2018, 6:26am UTC](https://discuss.elastic.co/t/dashboard-not-showing-data-request-failed/128305 "2018-04-18T06:26:30Z")
Hi, I imported the dashboard and mapping as explained in the docs. I have a simple logstash config for importing the data. Data shows up just fine in discovery but for some reason visualbuilder is having another one of… --- ## [ElasticSearch rest-high-level client compatibility and licensing](https://discuss.elastic.co/t/elasticsearch-rest-high-level-client-compatibility-and-licensing/335471)
**Author:** [@Nikita\_Bratukhin](https://discuss.elastic.co/u/Nikita_Bratukhin)\ **Replies:** 1\ **Last updated:** [June 8, 2023, 1:35pm UTC](https://discuss.elastic.co/t/elasticsearch-rest-high-level-client-compatibility-and-licensing/335471 "2023-06-08T13:35:24Z")
Hello! I faced the problem the same as in this issue : stackoverflow/a/74102828 We would like to use newer ES client with old ES cluster( in order to gracefully migrate everything). But es client validates X-Elastic-P… --- ## [What is the different between Elasticsearch Platinum license](https://discuss.elastic.co/t/what-is-the-different-between-elasticsearch-platinum-license/321017)
**Author:** [@Kosala\_Randika\_Paran](https://discuss.elastic.co/u/Kosala_Randika_Paran)\ **Replies:** 1\ **Last updated:** [December 12, 2022, 10:39am UTC](https://discuss.elastic.co/t/what-is-the-different-between-elasticsearch-platinum-license/321017 "2022-12-12T10:39:57Z")
Hi, We have Elasticsearch Platinum license and it has two types of licenses such as Production and Non-production, so what is the difference between these two, and what are the limitations between them? --- ## [Dec 13th, 2025: \[EN\] Tailoring entity risk scoring to suit your data](https://discuss.elastic.co/t/dec-13th-2025-en-tailoring-entity-risk-scoring-to-suit-your-data/383862)
**Author:** [@Mark\_Hopkin](https://discuss.elastic.co/u/Mark_Hopkin)\ **Replies:** 0\ **Last updated:** [December 13, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-13th-2025-en-tailoring-entity-risk-scoring-to-suit-your-data/383862 "2025-12-13T08:00:55Z")
Entity Risk Scoring now offers even more control! We've extended customization options, so you can easily tailor risk calculations based on alerts and the asset criticality of your users, hosts, and services. It's now… --- ## [Heartbeat 8.5.0 Parsing Errors](https://discuss.elastic.co/t/heartbeat-8-5-0-parsing-errors/318031)
**Author:** [@christophercutajar](https://discuss.elastic.co/u/christophercutajar)\ **Replies:** 5\ **Last updated:** [November 17, 2022, 10:51am UTC](https://discuss.elastic.co/t/heartbeat-8-5-0-parsing-errors/318031 "2022-11-17T10:51:23Z")
Hi team, After upgrading our heartbeat deployment from 8.4.3 to 8.5.0, heartbeat data ingestion stopped. From the logs, we can see that the reason why the event cannot be ingested is due to parsing issues. \\"reason\\":… --- ## [Query String with Wildcard not giving exact matches in the result set first](https://discuss.elastic.co/t/query-string-with-wildcard-not-giving-exact-matches-in-the-result-set-first/330106)
**Author:** [@Avin\_Pereira](https://discuss.elastic.co/u/Avin_Pereira)\ **Replies:** 7\ **Last updated:** [April 20, 2023, 4:02am UTC](https://discuss.elastic.co/t/query-string-with-wildcard-not-giving-exact-matches-in-the-result-set-first/330106 "2023-04-20T04:02:49Z")
If a Query is fired to Elastic Search as shown below GET purchase\_order/\_search { "query": { "query\_string": { "query": "\*HEAVENLUXE-SG23FEB2022\*", "fields": \[ "purchaseOrderNumber^4" \] … --- ## [Change StorageClass of an already running cluster](https://discuss.elastic.co/t/change-storageclass-of-an-already-running-cluster/267573)
**Author:** [@dtapia](https://discuss.elastic.co/u/dtapia)\ **Replies:** 1\ **Last updated:** [March 22, 2021, 8:05am UTC](https://discuss.elastic.co/t/change-storageclass-of-an-already-running-cluster/267573 "2021-03-22T08:05:40Z")
I've created a cluster with a specific storageClass, but now I need to change the disks to something cheaper, but I get this error when trying to update the ElasticSearch CRD. Error: UPGRADE FAILED: cannot patch "elasti… --- ## [Kibana 7.2 behind nginx](https://discuss.elastic.co/t/kibana-7-2-behind-nginx/195772)
**Author:** [@usfbh95](https://discuss.elastic.co/u/usfbh95)\ **Replies:** 7\ **Last updated:** [August 24, 2019, 1:02am UTC](https://discuss.elastic.co/t/kibana-7-2-behind-nginx/195772 "2019-08-24T01:02:06Z")
I'm trying to use nginx to authenticate users into kibana with a token that is passed as an query parameter (i.e. ?token=XXXXXX), I'm totally new to nginx and I'm facing several problem and would really appreciate some h… --- ## [Condition OR in Nested Query](https://discuss.elastic.co/t/condition-or-in-nested-query/125236)
**Author:** [@TomTom](https://discuss.elastic.co/u/TomTom)\ **Replies:** 1\ **Last updated:** [March 22, 2018, 7:20pm UTC](https://discuss.elastic.co/t/condition-or-in-nested-query/125236 "2018-03-22T19:20:36Z")
I have this nested field mapping in Elasticsearch (6.2.2): "customfield\_open": { "properties": { "content": { "type": "nested", "properties": { "id": { … --- ## [How can I solve turkish letter issue in elasticsearch by using C# nest?](https://discuss.elastic.co/t/how-can-i-solve-turkish-letter-issue-in-elasticsearch-by-using-c-nest/79890)
**Author:** [@Yusuf\_Karatoprak](https://discuss.elastic.co/u/Yusuf_Karatoprak)\ **Replies:** 1\ **Last updated:** [March 31, 2017, 7:03am UTC](https://discuss.elastic.co/t/how-can-i-solve-turkish-letter-issue-in-elasticsearch-by-using-c-nest/79890 "2017-03-31T07:03:45Z")
0 down vote favorite In Turkey, we have Turkish letters like 'ğ', 'ü', 'ş', 'ı', 'ö', 'ç'. But when we search generally we use the letters 'g', 'u', 's', 'i', 'o', 'c'. This is not a rule but we generally do it, think li… --- ## [How to include the \_id field in the \_source](https://discuss.elastic.co/t/how-to-include-the--id-field-in-the--source/13319)
**Author:** [@Liron\_Cohen](https://discuss.elastic.co/u/Liron_Cohen)\ **Replies:** 1\ **Last updated:** [August 24, 2013, 6:12pm UTC](https://discuss.elastic.co/t/how-to-include-the--id-field-in-the--source/13319 "2013-08-24T18:12:01Z")
Hello, My projects uses CouchDB and thus each document contains a \*\_id\* fields that is uses for couch. Usually the value for the \_id is the \[type + dash + number\]. e.g "Location-7". I also have (in each document… --- ## [How max expansion works?](https://discuss.elastic.co/t/how-max-expansion-works/171534)
**Author:** [@c\_sharper](https://discuss.elastic.co/u/c_sharper)\ **Replies:** 0\ **Last updated:** [March 8, 2019, 5:12pm UTC](https://discuss.elastic.co/t/how-max-expansion-works/171534 "2019-03-08T17:12:17Z")
Hi, I faced the same problem as discussed here: How exactly works "max\_expansions" in match\_phrase\_prefix query? - #2 by Clinton\_Gormley But this is still not answered. I'm testing how match\_phrase\_prefix and max expan… --- ## [Elastic Ingest Pipeline with enrich processor to enrich nested objects](https://discuss.elastic.co/t/elastic-ingest-pipeline-with-enrich-processor-to-enrich-nested-objects/253044)
**Author:** [@bgiordano](https://discuss.elastic.co/u/bgiordano)\ **Replies:** 2\ **Last updated:** [October 26, 2020, 1:36pm UTC](https://discuss.elastic.co/t/elastic-ingest-pipeline-with-enrich-processor-to-enrich-nested-objects/253044 "2020-10-26T13:36:39Z")
What is the correct syntax for the enrich processor to access field for enrichment for an object within an array? This works to get access to field in single object, as shown in the example provided. This is what I am s… --- ## [ElasticSearch saving integer field as String](https://discuss.elastic.co/t/elasticsearch-saving-integer-field-as-string/20920)
**Author:** [@Rashmi\_Gogia](https://discuss.elastic.co/u/Rashmi_Gogia)\ **Replies:** 2\ **Last updated:** [December 6, 2014, 1:33pm UTC](https://discuss.elastic.co/t/elasticsearch-saving-integer-field-as-string/20920 "2014-12-06T13:33:44Z")
Hi, Could some one help me figure out what is the issue with below Logstash Configuration /mapping template . ES seems to ignore the mappings specified in the template and stores everything as string. I am usin… --- ## [Unable to see many custom index fields in Kibana Discover](https://discuss.elastic.co/t/unable-to-see-many-custom-index-fields-in-kibana-discover/237501)
**Author:** [@ozonshak](https://discuss.elastic.co/u/ozonshak)\ **Replies:** 6\ **Last updated:** [June 18, 2020, 12:11pm UTC](https://discuss.elastic.co/t/unable-to-see-many-custom-index-fields-in-kibana-discover/237501 "2020-06-18T12:11:00Z")
Hello. I'm attempting to load a new index into Elastic and Kibana. I have loaded it into ElasticSearch and I can see my fields just fine. Here is an example where I run a query against Dev Tools: { "took" : 2, "… --- ## [Getting Case insensitive Response in Hits](https://discuss.elastic.co/t/getting-case-insensitive-response-in-hits/269776)
**Author:** [@Sammeta\_David\_Raju](https://discuss.elastic.co/u/Sammeta_David_Raju)\ **Replies:** 8\ **Last updated:** [April 11, 2021, 2:05pm UTC](https://discuss.elastic.co/t/getting-case-insensitive-response-in-hits/269776 "2021-04-11T14:05:37Z")
Hi all I am getting case Insensitive Data in Hits(SearchResponse ) even I am having Case Sensitive Data in Elasticsearch index like index contains { customerName :"David", departmentName:"IT", applicantName:"Raju"} b… --- ## [Nextcloud integration (Kibana)](https://discuss.elastic.co/t/nextcloud-integration-kibana/224955)
**Author:** [@bbar](https://discuss.elastic.co/u/bbar)\ **Replies:** 3\ **Last updated:** [March 26, 2020, 2:47pm UTC](https://discuss.elastic.co/t/nextcloud-integration-kibana/224955 "2020-03-26T14:47:23Z")
Hello everybody, I'm student and for my final internship, I must realise in Nextcloud an integration plugin. Project should be integrat are Kibana. I don’t have any ressources to start this project. Do you have any d… --- ## [File input to grok filter to elasticsearch output](https://discuss.elastic.co/t/file-input-to-grok-filter-to-elasticsearch-output/105126)
**Author:** [@cm47](https://discuss.elastic.co/u/cm47)\ **Replies:** 3\ **Last updated:** [October 25, 2017, 7:18pm UTC](https://discuss.elastic.co/t/file-input-to-grok-filter-to-elasticsearch-output/105126 "2017-10-25T19:18:06Z")
Hi, I am trying to configure logstash to read lines from a custom file. Logstash configuration file: input { file { path =\> "/home/centos/customlog/testfile.log" codec =\> line start\_position =\> "beginning" ignore\_… --- ## [Extract substring from log field and translate it via YAML file](https://discuss.elastic.co/t/extract-substring-from-log-field-and-translate-it-via-yaml-file/58897)
**Author:** [@fantaghost](https://discuss.elastic.co/u/fantaghost)\ **Replies:** 3\ **Last updated:** [August 25, 2016, 7:52am UTC](https://discuss.elastic.co/t/extract-substring-from-log-field-and-translate-it-via-yaml-file/58897 "2016-08-25T07:52:37Z")
Hi All, I need to use an external YAML file to translate a field based on substring: YAML File structure: "testa": "application aaa" "testb": "application bbb" "testc": "application ccc" LOG Field content… --- ## [How to search text in a table containing 100M rows?](https://discuss.elastic.co/t/how-to-search-text-in-a-table-containing-100m-rows/1120)
**Author:** [@ryodo](https://discuss.elastic.co/u/ryodo)\ **Replies:** 3\ **Last updated:** [May 21, 2015, 6:27pm UTC](https://discuss.elastic.co/t/how-to-search-text-in-a-table-containing-100m-rows/1120 "2015-05-21T18:27:10Z")
I have a database that contains over 100 million rows in one table. At the beginning we have used MySQL but it's been difficult to do a search (PHP, CakePHP) from within - it takes an hour to search words in a field th… --- ## [Create metricbeat index pattern failed - index patterns are missing](https://discuss.elastic.co/t/create-metricbeat-index-pattern-failed-index-patterns-are-missing/108006)
**Author:** [@geneliu](https://discuss.elastic.co/u/geneliu)\ **Replies:** 1\ **Last updated:** [November 16, 2017, 11:29pm UTC](https://discuss.elastic.co/t/create-metricbeat-index-pattern-failed-index-patterns-are-missing/108006 "2017-11-16T23:29:29Z")
Version: ELK6.0 metricbeat.json of index-pattern from https://artifacts.elastic.co/downloads/beats/beats-dashboards/beats-dashboards-6.0.0.zip Command: curl -H 'Content-Type: application/json' -XPUT 'http://192.168.22… --- ## [Logstash-plugin-install hangs forever](https://discuss.elastic.co/t/logstash-plugin-install-hangs-forever/92144)
**Author:** [@tcouto](https://discuss.elastic.co/u/tcouto)\ **Replies:** 1\ **Last updated:** [July 6, 2017, 11:37pm UTC](https://discuss.elastic.co/t/logstash-plugin-install-hangs-forever/92144 "2017-07-06T23:37:10Z")
Well at least 12 hours... I know there are other topics very similar to this, but since they're closed I suppose I need to open a new one. From https://discuss.elastic.co/t/logstash-install-plugin-extremely-slow/50642 … --- ## [Elastic Cloud Private Link connectivity for clients with CloudID](https://discuss.elastic.co/t/elastic-cloud-private-link-connectivity-for-clients-with-cloudid/247933)
**Author:** [@kiwibel](https://discuss.elastic.co/u/kiwibel)\ **Replies:** 4\ **Last updated:** [September 9, 2020, 5:46am UTC](https://discuss.elastic.co/t/elastic-cloud-private-link-connectivity-for-clients-with-cloudid/247933 "2020-09-09T05:46:29Z")
Hi, We are using Elastic Cloud (AWS) and the ES client on the app side is configured with CloudID. We have added Private Link to access our deployment as described here: https://www.elastic.co/guide/en/cloud/current/e… --- ## [Filebeat / Send Logs](https://discuss.elastic.co/t/filebeat-send-logs/107923)
**Author:** [@rudee](https://discuss.elastic.co/u/rudee)\ **Replies:** 4\ **Last updated:** [November 29, 2017, 5:16pm UTC](https://discuss.elastic.co/t/filebeat-send-logs/107923 "2017-11-29T17:16:26Z")
Hi I am very new to Elastic and I have set up a lab, with componenets from the 5.6.4 stack (ElasticSearch/LogStash/Kibana/FileBeat) I have set up a node with FileBeat and can see the logs in Kibana. My question is, I … --- ## [How can I delete my account on discuss.elastic.co](https://discuss.elastic.co/t/how-can-i-delete-my-account-on-discuss-elastic-co/205557)
**Author:** [@anon83966306](https://discuss.elastic.co/u/anon83966306)\ **Replies:** 5\ **Last updated:** [October 29, 2019, 2:46am UTC](https://discuss.elastic.co/t/how-can-i-delete-my-account-on-discuss-elastic-co/205557 "2019-10-29T02:46:15Z")
How do I delete my account on this message board? --- ## [Issue on ES: caused by "dynamic scripting disabled"](https://discuss.elastic.co/t/issue-on-es-caused-by-dynamic-scripting-disabled/33465)
**Author:** [@sbalde](https://discuss.elastic.co/u/sbalde)\ **Replies:** 5\ **Last updated:** [November 3, 2015, 12:51am UTC](https://discuss.elastic.co/t/issue-on-es-caused-by-dynamic-scripting-disabled/33465 "2015-11-03T00:51:50Z")
Hi, I have installed a fresh Open Edx instance with ES 0.90.11 included. Unfortunately i'm running into an error with ES. Here's my config file: /#This file is created and updated by ansible, edit at your peril /… --- ## [Security exception for remote cluster calls](https://discuss.elastic.co/t/security-exception-for-remote-cluster-calls/341395)
**Author:** [@darshanypatel](https://discuss.elastic.co/u/darshanypatel)\ **Replies:** 2\ **Last updated:** [August 23, 2023, 12:07pm UTC](https://discuss.elastic.co/t/security-exception-for-remote-cluster-calls/341395 "2023-08-23T12:07:41Z")
I have a local & a remote cluster running on the same host (localhost) to be used by the integration tests. It is basically a sidecar container running ES. These tests were passing for ES version 7.16.2, but when I tried… --- ## [Issue with deploying Elasticsearch helm chart with dedicated nodes and deleting and re-deploying the release](https://discuss.elastic.co/t/issue-with-deploying-elasticsearch-helm-chart-with-dedicated-nodes-and-deleting-and-re-deploying-the-release/252067)
**Author:** [@mehta-ankit](https://discuss.elastic.co/u/mehta-ankit)\ **Replies:** 2\ **Last updated:** [October 14, 2020, 4:53pm UTC](https://discuss.elastic.co/t/issue-with-deploying-elasticsearch-helm-chart-with-dedicated-nodes-and-deleting-and-re-deploying-the-release/252067 "2020-10-14T16:53:36Z")
I have been using the elasticsearch helm chart from elastic for a long time now, but recently wanted to switch my architecture to use dedicated master and data nodes. I looked at the example provided here: https://githu… --- ## [Parallel Queries on Elasticsearch](https://discuss.elastic.co/t/parallel-queries-on-elasticsearch/321541)
**Author:** [@Sheharyar\_Khalid](https://discuss.elastic.co/u/Sheharyar_Khalid)\ **Replies:** 2\ **Last updated:** [December 20, 2022, 2:53am UTC](https://discuss.elastic.co/t/parallel-queries-on-elasticsearch/321541 "2022-12-20T02:53:36Z")
Hello everyone, I am new to elasticsearch and still trying out a few things. I have an ELK deployment with a single node with multiple indexes and shards . Are the search queries run on the data sequential or are they … --- ## [Kibana 7.5 Can't Unpacking!](https://discuss.elastic.co/t/kibana-7-5-cant-unpacking/210486)
**Author:** [@Iceph](https://discuss.elastic.co/u/Iceph)\ **Replies:** 2\ **Last updated:** [December 15, 2019, 11:27am UTC](https://discuss.elastic.co/t/kibana-7-5-cant-unpacking/210486 "2019-12-15T11:27:32Z")
I will install kibana 7.5 on ubuntu by apt-get sudo apt-get update && sudo apt-get install kibana but when i install logs told me can't unpacking kibana. who has a best suggestion? --- ## [Snapshot strategy](https://discuss.elastic.co/t/snapshot-strategy/147121)
**Author:** [@pri](https://discuss.elastic.co/u/pri)\ **Replies:** 2\ **Last updated:** [September 4, 2018, 1:07am UTC](https://discuss.elastic.co/t/snapshot-strategy/147121 "2018-09-04T01:07:55Z")
I have been reading about snapshot and restore functionality in Elasticsearch. Coming from relational database background, it took some effort to understand this correctly. Based on my understanding, I am trying to final… --- ## [Basic Help With Script Field](https://discuss.elastic.co/t/basic-help-with-script-field/120948)
**Author:** [@gbarrett](https://discuss.elastic.co/u/gbarrett)\ **Replies:** 2\ **Last updated:** [February 22, 2018, 12:10pm UTC](https://discuss.elastic.co/t/basic-help-with-script-field/120948 "2018-02-22T12:10:19Z")
Hi all, I'm new to the ELK Stack, and I'm struggling to create a scripted field properly. I am polling uptime via SNMP and get a value back in seconds. (Actually in TIMETICKS but yay LogStash for allowing me to convert… --- ## [2-phase aggregation on Y-axis value?](https://discuss.elastic.co/t/2-phase-aggregation-on-y-axis-value/31442)
**Author:** [@ogibayashi](https://discuss.elastic.co/u/ogibayashi)\ **Replies:** 2\ **Last updated:** [October 13, 2015, 10:12am UTC](https://discuss.elastic.co/t/2-phase-aggregation-on-y-axis-value/31442 "2015-10-13T10:12:28Z")
Hi, I have a requirement below and want some advise how to do this. Target log is kind of summarized access log which has fields like timestamp, click\_count, url, some\_parameter. Interval of timestamp is usually 10 … --- ## [Difference between saved searches and saved queries](https://discuss.elastic.co/t/difference-between-saved-searches-and-saved-queries/249446)
**Author:** [@eviatt](https://discuss.elastic.co/u/eviatt)\ **Replies:** 1\ **Last updated:** [September 22, 2020, 6:14am UTC](https://discuss.elastic.co/t/difference-between-saved-searches-and-saved-queries/249446 "2020-09-22T06:14:14Z")
Hi Community Could someone explain me, whats the difference between saved searches and saved queries? Thanks --- ## [CircuitBreakingException \[parent\] Data too large in 7.4.2](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-in-7-4-2/229082)
**Author:** [@engstrom](https://discuss.elastic.co/u/engstrom)\ **Replies:** 1\ **Last updated:** [April 21, 2020, 3:29pm UTC](https://discuss.elastic.co/t/circuitbreakingexception-parent-data-too-large-in-7-4-2/229082 "2020-04-21T15:29:38Z")
I'm hoping someone can help me understand what is causing this exception. This is being thrown frequently, both while writing to and reading from the cluster. Here's an example error I received while running GET /\_cat/i… --- ## [Maximum number of retries reached](https://discuss.elastic.co/t/maximum-number-of-retries-reached/117480)
**Author:** [@bbcdenmark](https://discuss.elastic.co/u/bbcdenmark)\ **Replies:** 1\ **Last updated:** [January 30, 2018, 12:35pm UTC](https://discuss.elastic.co/t/maximum-number-of-retries-reached/117480 "2018-01-30T12:35:24Z")
We got 3 different environments running Elastic Search - Development, Test and Production. But recently we started to get the error "Maximum number of retries reached" when creating an Index from a C# program, but only i… --- ## [Skip one o more tabs & in grok?](https://discuss.elastic.co/t/skip-one-o-more-tabs-in-grok/88299)
**Author:** [@Nikhilpawar1985](https://discuss.elastic.co/u/Nikhilpawar1985)\ **Replies:** 1\ **Last updated:** [June 5, 2017, 7:02pm UTC](https://discuss.elastic.co/t/skip-one-o-more-tabs-in-grok/88299 "2017-06-05T19:02:22Z")
can someone please advise how to skip one or more tabs coming in input log line ? I/P - \[2017-06-05 12:16:08,353\] :|: INFO :|: lvprdsnbfe1.lv.jabodo.com :|: :|: :|:\\n\\t\\t\\t\\t :|: :|: c.m.c.PeriodicProd… --- ## [Logstash OSS License after 7.10 version](https://discuss.elastic.co/t/logstash-oss-license-after-7-10-version/283429)
**Author:** [@YashC](https://discuss.elastic.co/u/YashC)\ **Replies:** 3\ **Last updated:** [September 6, 2021, 10:57pm UTC](https://discuss.elastic.co/t/logstash-oss-license-after-7-10-version/283429 "2021-09-06T22:57:07Z")
Hello, I am using logstash-oss docker image version 7.10.2, as it is based on Apache 2.0 license. Since Jan 2021 Elastic introduced a different license model starting from versions 7.11. However, there are still logst… --- ## [Similar name matching (name aliases)](https://discuss.elastic.co/t/similar-name-matching-name-aliases/195999)
**Author:** [@mikesparr](https://discuss.elastic.co/u/mikesparr)\ **Replies:** 3\ **Last updated:** [August 21, 2019, 4:06pm UTC](https://discuss.elastic.co/t/similar-name-matching-name-aliases/195999 "2019-08-21T16:06:08Z")
What is best way to design for and query similar names and return a single record Names Homer James Simpson vs Homer James Simpson Homer James Simpson vs Homer J Simpson Homer James Simpson vs H J Simpson Orgs / Busi… --- ## [New Install ELK 6.1.0 & Filebeat 6.1.0](https://discuss.elastic.co/t/new-install-elk-6-1-0-filebeat-6-1-0/112680)
**Author:** [@teejayuu](https://discuss.elastic.co/u/teejayuu)\ **Replies:** 3\ **Last updated:** [January 9, 2018, 5:01am UTC](https://discuss.elastic.co/t/new-install-elk-6-1-0-filebeat-6-1-0/112680 "2018-01-09T05:01:31Z")
I have just created a new install of ELK 6.1.0 and am trying to use Filebeat to ship IIS logs to logstash. The ELK stack appears to be working and the filebeat service has started. I've vreated firrewall exceptions on … --- ## [Pgsql invalid column\_length](https://discuss.elastic.co/t/pgsql-invalid-column-length/48624)
**Author:** [@ceekay](https://discuss.elastic.co/u/ceekay)\ **Replies:** 3\ **Last updated:** [May 3, 2016, 11:24am UTC](https://discuss.elastic.co/t/pgsql-invalid-column-length/48624 "2016-05-03T11:24:46Z")
Hi there, I'm running Packetbeat 5.0.0~alpha1, and getting a lot of entries like the following in syslog: Apr 28 16:04:08 cat-pg92 /usr/bin/packetbeat\[30951\]: parse.go:531: Pgsql invalid column\_length=4294967295, buff… [Previous page](https://discuss.elastic.co/top.md?page=919&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=921&per_page=50&period=all)