# Top

**URL:** https://discuss.elastic.co/top.md?page=927&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 928

---

## [Import a csv, ndjson or log file not showing in Kibana](https://discuss.elastic.co/t/import-a-csv-ndjson-or-log-file-not-showing-in-kibana/248511)

<div class="topic-metadata">

**Author:** [@Maria20](https://discuss.elastic.co/u/Maria20)\
**Replies:** 7\
**Last updated:** [September 16, 2020, 9:01am UTC](https://discuss.elastic.co/t/import-a-csv-ndjson-or-log-file-not-showing-in-kibana/248511 "2020-09-16T09:01:25Z")

</div>

Hello, I am using Kibana 7.3.2 and Elastic 7.3.2 to visualize some data but I cannot see the option to "import a csv ndjson or log file" Thank you,

---

## [Is there a way to update index-pattern \_id?](https://discuss.elastic.co/t/is-there-a-way-to-update-index-pattern-id/171985)

<div class="topic-metadata">

**Author:** [@Andrew\_Griffiths](https://discuss.elastic.co/u/Andrew_Griffiths)\
**Replies:** 1\
**Last updated:** [March 12, 2019, 3:39pm UTC](https://discuss.elastic.co/t/is-there-a-way-to-update-index-pattern-id/171985 "2019-03-12T15:39:04Z")

</div>

I have had to recreate some index-patterns but they have created with random id's example: index-pattern:29adfc30-09cb-11e9-9616-6fa1143e677c","\_score":3.0726933,"\_source":{"index-pattern":{"title":"elastalert\*","timeF…

---

## [ES network architecture](https://discuss.elastic.co/t/es-network-architecture/87646)

<div class="topic-metadata">

**Author:** [@ES\_SIL](https://discuss.elastic.co/u/ES_SIL)\
**Replies:** 7\
**Last updated:** [June 5, 2017, 5:46pm UTC](https://discuss.elastic.co/t/es-network-architecture/87646 "2017-06-05T17:46:33Z")

</div>

Hi all, We are exploring ES in our stack. I was looking around for some good architecture diagrams which shows internals of ES like how Netty is used by ES, which protocols needs to be configured and enabled for maki…

---

## [Metricbeat cpu metricset: what is sample rate?](https://discuss.elastic.co/t/metricbeat-cpu-metricset-what-is-sample-rate/74679)

<div class="topic-metadata">

**Author:** [@leigh](https://discuss.elastic.co/u/leigh)\
**Replies:** 1\
**Last updated:** [February 10, 2017, 4:57pm UTC](https://discuss.elastic.co/t/metricbeat-cpu-metricset-what-is-sample-rate/74679 "2017-02-10T16:57:29Z")

</div>

We can set the period of the cpu metricset using the metricbeat.yml config file (which I believe represents the frequency with which the metricset is run). What is the minimum value that can be set? is it one second. If…

---

## [Timezone for date filter seems not working](https://discuss.elastic.co/t/timezone-for-date-filter-seems-not-working/27739)

<div class="topic-metadata">

**Author:** [@z\_afshar](https://discuss.elastic.co/u/z_afshar)\
**Replies:** 1\
**Last updated:** [August 25, 2015, 4:05am UTC](https://discuss.elastic.co/t/timezone-for-date-filter-seems-not-working/27739 "2015-08-25T04:05:58Z")

</div>

Hello, I am newbie to logstash and have a problem with date filter. I have a historical csv file with information like this in each line: ﻿2015-06-10 16:00:00.017,10.0.0.100,192.168.1.1 the time specified above is in…

---

## [Metricbeat Aggs fail after adding Index Routing](https://discuss.elastic.co/t/metricbeat-aggs-fail-after-adding-index-routing/86491)

<div class="topic-metadata">

**Author:** [@ritchierich](https://discuss.elastic.co/u/ritchierich)\
**Replies:** 4\
**Last updated:** [June 27, 2017, 5:38am UTC](https://discuss.elastic.co/t/metricbeat-aggs-fail-after-adding-index-routing/86491 "2017-06-27T05:38:35Z")

</div>

Earlier this week, I updated my v 5.3.2 cluster configuration for Hot/Warm Architecture. I added "index.routing.allocation.require.box\_type": "hot" to all existing daily indices then updated my logstash and metricbeat …

---

## [Calendar filter in Kibana](https://discuss.elastic.co/t/calendar-filter-in-kibana/240468)

<div class="topic-metadata">

**Author:** [@PRACHI\_GUPTA](https://discuss.elastic.co/u/PRACHI_GUPTA)\
**Replies:** 8\
**Last updated:** [July 10, 2020, 1:38pm UTC](https://discuss.elastic.co/t/calendar-filter-in-kibana/240468 "2020-07-10T13:38:28Z")

</div>

Hi, Is there any way to add date picker filter in kibana? Thanks!!

---

## [Two bars in vertical/horizontal chart](https://discuss.elastic.co/t/two-bars-in-vertical-horizontal-chart/282674)

<div class="topic-metadata">

**Author:** [@mzagrajek](https://discuss.elastic.co/u/mzagrajek)\
**Replies:** 4\
**Last updated:** [September 13, 2021, 12:58pm UTC](https://discuss.elastic.co/t/two-bars-in-vertical-horizontal-chart/282674 "2021-09-13T12:58:45Z")

</div>

Hi there I have problem with visualization. What I want? vertical or horizontal chart one bar representing field with all products divided by some business unit: Y-axis will be count of those, X-axis the business uni…

---

## [Timefilter inside staticColumn in Kibana Canvas](https://discuss.elastic.co/t/timefilter-inside-staticcolumn-in-kibana-canvas/189517)

<div class="topic-metadata">

**Author:** [@Vartika\_Srivastava](https://discuss.elastic.co/u/Vartika_Srivastava)\
**Replies:** 4\
**Last updated:** [July 12, 2019, 2:12pm UTC](https://discuss.elastic.co/t/timefilter-inside-staticcolumn-in-kibana-canvas/189517 "2019-07-12T14:12:45Z")

</div>

Hi, how can we use timefilter inside staticColumn value,but I am getting error - "\[staticColumn\] \> \[timefilter\] \> Can not cast 'datatable' to any of 'filter' " sample template query :- timefilter column="time" from="n…

---

## [Logstash-plain.log is 17G in size](https://discuss.elastic.co/t/logstash-plain-log-is-17g-in-size/140643)

<div class="topic-metadata">

**Author:** [@databeata](https://discuss.elastic.co/u/databeata)\
**Replies:** 4\
**Last updated:** [July 19, 2018, 1:22am UTC](https://discuss.elastic.co/t/logstash-plain-log-is-17g-in-size/140643 "2018-07-19T01:22:09Z")

</div>

Why is logstash-plain.log 17G in size? ls -lh /path/logstash/path\_logs -rw-r--r-- 1 root root 4.8M Jul 17 23:59 logstash-plain-2018-07-17.log -rw-r--r-- 1 root root 17G Jul 18 22:43 logstash-plain.log cat /path/logs…

---

## [Restoring snapshot to different Cluster](https://discuss.elastic.co/t/restoring-snapshot-to-different-cluster/88507)

<div class="topic-metadata">

**Author:** [@shubham9799](https://discuss.elastic.co/u/shubham9799)\
**Replies:** 4\
**Last updated:** [June 7, 2017, 10:17am UTC](https://discuss.elastic.co/t/restoring-snapshot-to-different-cluster/88507 "2017-06-07T10:17:03Z")

</div>

Hi, I am trying to restore the snapshot of my cluster which is present on primary server to a backup cluster which is on secondary server. I have to do this on a regular intervals. Both of these servers are not mounted …

---

## [Packet beat eats up 3GB of ram when running for a while](https://discuss.elastic.co/t/packet-beat-eats-up-3gb-of-ram-when-running-for-a-while/48333)

<div class="topic-metadata">

**Author:** [@MikeC](https://discuss.elastic.co/u/MikeC)\
**Replies:** 4\
**Last updated:** [May 2, 2016, 10:50pm UTC](https://discuss.elastic.co/t/packet-beat-eats-up-3gb-of-ram-when-running-for-a-while/48333 "2016-05-02T22:50:39Z")

</div>

Hi, i've got packetbeat installed on a server and it sends its measurements to an elastic cluster (4 nodes, 12GB ram). After a while (and on one particular server) packetbeat consumes 2-3GB RAM of memory and it makes t…

---

## [Uploading hdfs snapshot into s3](https://discuss.elastic.co/t/uploading-hdfs-snapshot-into-s3/39207)

<div class="topic-metadata">

**Author:** [@sparise](https://discuss.elastic.co/u/sparise)\
**Replies:** 4\
**Last updated:** [January 14, 2016, 3:34pm UTC](https://discuss.elastic.co/t/uploading-hdfs-snapshot-into-s3/39207 "2016-01-14T15:34:03Z")

</div>

Hello All, Is there any feature to create hdfs snapshot in HDP and store it into s3 by using Elastic search. I am using HDP2.2 Cluster.

---

## [Unknown health status](https://discuss.elastic.co/t/unknown-health-status/266792)

<div class="topic-metadata">

**Author:** [@Harm](https://discuss.elastic.co/u/Harm)\
**Replies:** 3\
**Last updated:** [March 15, 2021, 2:43pm UTC](https://discuss.elastic.co/t/unknown-health-status/266792 "2021-03-15T14:43:58Z")

</div>

Kibana version: 7.10.0 Elasticsearch version: 7.10.0 APM Server version: 7.10.0 APM Agent language and version: dotnet 1.5.1 Browser version: Chrome 89 Original install method (e.g. download page, yum, deb, from sou…

---

## [Most recent CSV file from S3 gets read indefinitely](https://discuss.elastic.co/t/most-recent-csv-file-from-s3-gets-read-indefinitely/191906)

<div class="topic-metadata">

**Author:** [@resuni](https://discuss.elastic.co/u/resuni)\
**Replies:** 3\
**Last updated:** [July 24, 2019, 4:47pm UTC](https://discuss.elastic.co/t/most-recent-csv-file-from-s3-gets-read-indefinitely/191906 "2019-07-24T16:47:54Z")

</div>

I'm trying to process CSV files stored in an S3 bucket using Logstash. Everything works fine until it gets to the last file, which it creates entries in Elasticsearch for endlessly. The data is in daily time buckets, an…

---

## [Adding a sample Form in Kibana](https://discuss.elastic.co/t/adding-a-sample-form-in-kibana/139113)

<div class="topic-metadata">

**Author:** [@asallemi](https://discuss.elastic.co/u/asallemi)\
**Replies:** 3\
**Last updated:** [July 9, 2018, 3:15pm UTC](https://discuss.elastic.co/t/adding-a-sample-form-in-kibana/139113 "2018-07-09T15:15:34Z")

</div>

Hello, I would like to create a sample Form in Kibana (version 6.3) to add data to elasticsearch. Is there an example or link which I can follow it to create my UI in first step and loading data to elasticsearch in seco…

---

## [The aggregation of elasticsearch is so strickly?](https://discuss.elastic.co/t/the-aggregation-of-elasticsearch-is-so-strickly/111946)

<div class="topic-metadata">

**Author:** [@antony.y](https://discuss.elastic.co/u/antony.y)\
**Replies:** 3\
**Last updated:** [December 16, 2017, 5:44am UTC](https://discuss.elastic.co/t/the-aggregation-of-elasticsearch-is-so-strickly/111946 "2017-12-16T05:44:37Z")

</div>

\[image\] is there anyone who can recognize any different between these two queries ? When i copy these two sentences , there are some differences The left is the correct one, but when i copy the right sentence , it do…

---

## [Elasticsearch aggregation not matching with unique count metrics](https://discuss.elastic.co/t/elasticsearch-aggregation-not-matching-with-unique-count-metrics/109796)

<div class="topic-metadata">

**Author:** [@mormor1971](https://discuss.elastic.co/u/mormor1971)\
**Replies:** 3\
**Last updated:** [December 1, 2017, 11:15am UTC](https://discuss.elastic.co/t/elasticsearch-aggregation-not-matching-with-unique-count-metrics/109796 "2017-12-01T11:15:39Z")

</div>

Hello All, I have a weird issue where if I have a large dataset with authentications against a nas device and I ask for a specific region with nas:xxxx\* and the authentications against that region I get two different re…

---

## [Query items by time stamp not working](https://discuss.elastic.co/t/query-items-by-time-stamp-not-working/77229)

<div class="topic-metadata">

**Author:** [@Ben\_Hoffman](https://discuss.elastic.co/u/Ben_Hoffman)\
**Replies:** 3\
**Last updated:** [March 3, 2017, 3:30pm UTC](https://discuss.elastic.co/t/query-items-by-time-stamp-not-working/77229 "2017-03-03T15:30:42Z")

</div>

So I want to get all events since a certain time, for example since "2017-03-02T21:56:53.033Z". I made a runtime\_timestamp field that just copies the @timestamp field, because I am parsing this data into C# and @ symbo…

---

## [Monitoring Bulk Request Queue](https://discuss.elastic.co/t/monitoring-bulk-request-queue/44117)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 3\
**Last updated:** [March 14, 2016, 9:58am UTC](https://discuss.elastic.co/t/monitoring-bulk-request-queue/44117 "2016-03-14T09:58:04Z")

</div>

Hi, Is there a way to view the number of bulk requests waiting to be processed? It will help me to understand whether I have "threadpool.bulk.queue\_size" set appropriately... Regards, David

---

## [Performance impact of the "include/exclude" fields of an aggregation](https://discuss.elastic.co/t/performance-impact-of-the-include-exclude-fields-of-an-aggregation/36969)

<div class="topic-metadata">

**Author:** [@deviantony](https://discuss.elastic.co/u/deviantony)\
**Replies:** 3\
**Last updated:** [December 11, 2015, 12:38pm UTC](https://discuss.elastic.co/t/performance-impact-of-the-include-exclude-fields-of-an-aggregation/36969 "2015-12-11T12:38:10Z")

</div>

Hello there, I'd love to know what are the performance impacts of using these fields in an aggregation on a big dataset? As it implies regexp, I'm not really sure of how it would perform against a lot of data.

---

## [Kibana fails in talking to Tribe Node](https://discuss.elastic.co/t/kibana-fails-in-talking-to-tribe-node/22861)

<div class="topic-metadata">

**Author:** [@Abigail](https://discuss.elastic.co/u/Abigail)\
**Replies:** 3\
**Last updated:** [May 14, 2015, 3:11pm UTC](https://discuss.elastic.co/t/kibana-fails-in-talking-to-tribe-node/22861 "2015-05-14T15:11:41Z")

</div>

Hi, I have two ElasticSearch clusters and one tribe node for searching across the two clusters. And there is a kibana 4 connects to the tribe node. What I have done are: 1. Created .kibana and kibana-int manually…

---

## [Understanding my Index using HEAD plugin](https://discuss.elastic.co/t/understanding-my-index-using-head-plugin/18376)

<div class="topic-metadata">

**Author:** [@IronMike](https://discuss.elastic.co/u/IronMike)\
**Replies:** 3\
**Last updated:** [June 27, 2014, 6:23pm UTC](https://discuss.elastic.co/t/understanding-my-index-using-head-plugin/18376 "2014-06-27T18:23:28Z")

</div>

I am trying to understand my index (attached in screenshot) and how can I improve size and performance. The goal is to index 5 million docs. So, I started small by indexing 421,000 docs as shown in the image. - I a…

---

## [Unhealthy cluster](https://discuss.elastic.co/t/unhealthy-cluster/132664)

<div class="topic-metadata">

**Author:** [@hummingbirb](https://discuss.elastic.co/u/hummingbirb)\
**Replies:** 1\
**Last updated:** [May 21, 2018, 2:07pm UTC](https://discuss.elastic.co/t/unhealthy-cluster/132664 "2018-05-21T14:07:46Z")

</div>

Hi, recently I've inherited elk stack which seems to be in unhealthy condition. There's only one node with all unassigned shards for which I'll be thankful if someone can tell me how to recover. Here's some info I've m…

---

## [Timelion Kibana Error : Syntax Error / Incomplete function](https://discuss.elastic.co/t/timelion-kibana-error-syntax-error-incomplete-function/140127)

<div class="topic-metadata">

**Author:** [@Harsh\_Sharma](https://discuss.elastic.co/u/Harsh_Sharma)\
**Replies:** 2\
**Last updated:** [July 17, 2018, 8:06pm UTC](https://discuss.elastic.co/t/timelion-kibana-error-syntax-error-incomplete-function/140127 "2018-07-17T20:06:07Z")

</div>

Hello Everyone, While I'm using Timelion feature I'm getting below error - Timelion: SyntaxError: {"type":"incompleteFunction","function":"es","location":{"min":0,"max":3},"text":".es"} Visualize: SyntaxError: {"type"…

---

## [Error in processing events from DLQ](https://discuss.elastic.co/t/error-in-processing-events-from-dlq/126149)

<div class="topic-metadata">

**Author:** [@pandeesh](https://discuss.elastic.co/u/pandeesh)\
**Replies:** 2\
**Last updated:** [March 29, 2018, 9:18pm UTC](https://discuss.elastic.co/t/error-in-processing-events-from-dlq/126149 "2018-03-29T21:18:20Z")

</div>

All, I am trying to expose the raw events in a index dedicated to DLQ. These are the fields I would like to expose: index\_name (where it was unable to perform originally) error\_reason(exception) raw\_event(\_source) …

---

## [Does the Ingest node act as a queue?](https://discuss.elastic.co/t/does-the-ingest-node-act-as-a-queue/52006)

<div class="topic-metadata">

**Author:** [@scotttam](https://discuss.elastic.co/u/scotttam)\
**Replies:** 2\
**Last updated:** [June 7, 2016, 12:23am UTC](https://discuss.elastic.co/t/does-the-ingest-node-act-as-a-queue/52006 "2016-06-07T00:23:19Z")

</div>

I'm designing a new Elasticsearch cluster. Normally I'd have some sort of queue (e.g., Kafka, redis, SNS/SQS, etc.) where all the indexing requests would get queued up and a process would feed the indexing requests into …

---

## [Removing special characters](https://discuss.elastic.co/t/removing-special-characters/309766)

<div class="topic-metadata">

**Author:** [@JeremyP](https://discuss.elastic.co/u/JeremyP)\
**Replies:** 6\
**Last updated:** [July 18, 2022, 4:40pm UTC](https://discuss.elastic.co/t/removing-special-characters/309766 "2022-07-18T16:40:07Z")

</div>

Hello, I have some special characters in one of my fields which I'm having issues removing. They may be reserved characters so my logstash instance is failing. Here is the event in question... "proof" =\> \[ …

---

## [Search for any word without mappings using URI query](https://discuss.elastic.co/t/search-for-any-word-without-mappings-using-uri-query/107487)

<div class="topic-metadata">

**Author:** [@elasticuser1](https://discuss.elastic.co/u/elasticuser1)\
**Replies:** 6\
**Last updated:** [November 15, 2017, 6:37pm UTC](https://discuss.elastic.co/t/search-for-any-word-without-mappings-using-uri-query/107487 "2017-11-15T18:37:24Z")

</div>

Hi, I am indexing very big json and it do not have mappings defined. My requirement is to search for any word in this json. I have created nGram tokenizer like below - { "index": { "index": "my\_idx", "type":…

---

## [Add or recover button/input for timeFilter Selection on "embedded Dashboard"](https://discuss.elastic.co/t/add-or-recover-button-input-for-timefilter-selection-on-embedded-dashboard/63724)

<div class="topic-metadata">

**Author:** [@Diyal](https://discuss.elastic.co/u/Diyal)\
**Replies:** 2\
**Last updated:** [October 24, 2016, 11:36pm UTC](https://discuss.elastic.co/t/add-or-recover-button-input-for-timefilter-selection-on-embedded-dashboard/63724 "2016-10-24T23:36:13Z")

</div>

Hi, I would like to have timeFilter Selection for a embedded dashboard. My embedded dashboard : https://@ip:5601/app/kibana#/dashboard/dashboard1?embed What i would like : change time Filter like Kibana Admin Side …

---

## [APM not able to connect via Fleet Integration](https://discuss.elastic.co/t/apm-not-able-to-connect-via-fleet-integration/309140)

<div class="topic-metadata">

**Author:** [@tsbayne](https://discuss.elastic.co/u/tsbayne)\
**Replies:** 5\
**Last updated:** [July 29, 2022, 10:33am UTC](https://discuss.elastic.co/t/apm-not-able-to-connect-via-fleet-integration/309140 "2022-07-29T10:33:50Z")

</div>

Kibana version: 8.3.1 Elasticsearch version: 8.3.1 APM Server version: 8.3.1 Original install method (e.g. download page, yum, deb, from source, etc.) and version: Ubuntu 20.04 deb package Fresh install or upgraded …

---

## [Curator Multiple Snapshots at paticular time?](https://discuss.elastic.co/t/curator-multiple-snapshots-at-paticular-time/89377)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 5\
**Last updated:** [June 15, 2017, 2:15am UTC](https://discuss.elastic.co/t/curator-multiple-snapshots-at-paticular-time/89377 "2017-06-15T02:15:56Z")

</div>

Hi Team, My Usecase: I have 6 VM's in my azure account and i want to use Curator 4.2.6 to snapshot the indices and running 3 snapshot curator jobs in each VM at particular time (10.00 PM) . I will run these curator…

---

## [Installing Marvel Licence Upgrade in WINDOWS (10) PLATFORM](https://discuss.elastic.co/t/installing-marvel-licence-upgrade-in-windows-10-platform/35383)

<div class="topic-metadata">

**Author:** [@oguchi](https://discuss.elastic.co/u/oguchi)\
**Replies:** 5\
**Last updated:** [November 28, 2015, 6:13pm UTC](https://discuss.elastic.co/t/installing-marvel-licence-upgrade-in-windows-10-platform/35383 "2015-11-28T18:13:51Z")

</div>

Here is the instruction to install the Marvel License Upgrade: curl -XPUT -u admin 'http://:/\_license' -d @license.json I am running WIN10. Where exactly do I enter the above, and what form of it is suitable for WIN1…

---

## [Filebeat not starting](https://discuss.elastic.co/t/filebeat-not-starting/348486)

<div class="topic-metadata">

**Author:** [@tagba](https://discuss.elastic.co/u/tagba)\
**Replies:** 7\
**Last updated:** [December 4, 2023, 1:35pm UTC](https://discuss.elastic.co/t/filebeat-not-starting/348486 "2023-12-04T13:35:15Z")

</div>

I have installed elk version 7.3.2 on an ubuntu machine running on a VM, but the filebeat is not starting. Below is the error message. × filebeat.service - Filebeat sends log files to Logstash or directly to Elasticsea…

---

## [Problem with painless script](https://discuss.elastic.co/t/problem-with-painless-script/159298)

<div class="topic-metadata">

**Author:** [@Calvin\_Zhang](https://discuss.elastic.co/u/Calvin_Zhang)\
**Replies:** 1\
**Last updated:** [December 4, 2018, 7:16am UTC](https://discuss.elastic.co/t/problem-with-painless-script/159298 "2018-12-04T07:16:50Z")

</div>

I was executing a bulk upsert with script when an error occurred. Here is the error message: "error": { "type": "illegal\_argument\_exception", "reason": "failed to execute script", "caused\_by": { "type": "script\_exc…

---

## [Multiple folders inside nodes folder](https://discuss.elastic.co/t/multiple-folders-inside-nodes-folder/85358)

<div class="topic-metadata">

**Author:** [@aviral\_srivastava](https://discuss.elastic.co/u/aviral_srivastava)\
**Replies:** 1\
**Last updated:** [May 13, 2017, 2:02am UTC](https://discuss.elastic.co/t/multiple-folders-inside-nodes-folder/85358 "2017-05-13T02:02:40Z")

</div>

Red Hat Enterprise Linux Server release 7.2 (Maipo) elasticsearch 2.1.1 Inside the path /home/appadmin/elasticsearch-2.1.1/data/linux-elasticsearch/nodes there are two folders namely "0" and "1" Why there are two fol…

---

## [How to format sum\_bucket aggregation float output?](https://discuss.elastic.co/t/how-to-format-sum-bucket-aggregation-float-output/293851)

<div class="topic-metadata">

**Author:** [@Eduardo\_Montes](https://discuss.elastic.co/u/Eduardo_Montes)\
**Replies:** 3\
**Last updated:** [January 10, 2022, 1:16pm UTC](https://discuss.elastic.co/t/how-to-format-sum-bucket-aggregation-float-output/293851 "2022-01-10T13:16:32Z")

</div>

I use Elasticsearch for my Search Service and I use this JSON request for sum\_bucket aggregation: "from": 0, "size": 0, "aggregations": { "aggr": { "type": "term", "field": "type.…

---

## [Bulk API Insert Data missing](https://discuss.elastic.co/t/bulk-api-insert-data-missing/284325)

<div class="topic-metadata">

**Author:** [@Parth\_Darji](https://discuss.elastic.co/u/Parth_Darji)\
**Replies:** 3\
**Last updated:** [September 20, 2021, 8:57am UTC](https://discuss.elastic.co/t/bulk-api-insert-data-missing/284325 "2021-09-20T08:57:38Z")

</div>

Hi Team, We are using Elastic 7 for our application with Java base code and elasticsearch-rest-high-level-client with 7.13.3 version for bulk insert using restHighLevelClient.bulk(createIndexRequest(contacts), RequestOp…

---

## [Docker container becomes unresponsive with Elastic Logging Plugin when Elastic server is not available](https://discuss.elastic.co/t/docker-container-becomes-unresponsive-with-elastic-logging-plugin-when-elastic-server-is-not-available/271261)

<div class="topic-metadata">

**Author:** [@UnstableFractal](https://discuss.elastic.co/u/UnstableFractal)\
**Replies:** 3\
**Last updated:** [May 4, 2021, 1:17pm UTC](https://discuss.elastic.co/t/docker-container-becomes-unresponsive-with-elastic-logging-plugin-when-elastic-server-is-not-available/271261 "2021-05-04T13:17:51Z")

</div>

Sometimes a container or a series of containers becomes unresponsive when Elastic server is not available so we can't: restart/stop/kill these containers. Docker logs command is not available for these containers. Docker…

---

## [При большом респонсе лишняя скобка в body request](https://discuss.elastic.co/t/body-request/86387)

<div class="topic-metadata">

**Author:** [@klara](https://discuss.elastic.co/u/klara)\
**Replies:** 8\
**Last updated:** [May 23, 2017, 1:02pm UTC](https://discuss.elastic.co/t/body-request/86387 "2017-05-23T13:02:41Z")

</div>

Возможно это баг, возможно так задумано, но, если я получаю ответ эластика где небольшое количество строк- это валидный json, если ответ огромный -начиная с какой то тысячи строк- лишня скобка появляется всегда в районе …

---

## ["reason"=\>"failed to parse field \[host.name\] of type \[text\] in document with id](https://discuss.elastic.co/t/reason-failed-to-parse-field-host-name-of-type-text-in-document-with-id/270923)

<div class="topic-metadata">

**Author:** [@BlackCat](https://discuss.elastic.co/u/BlackCat)\
**Replies:** 2\
**Last updated:** [April 22, 2021, 10:18am UTC](https://discuss.elastic.co/t/reason-failed-to-parse-field-host-name-of-type-text-in-document-with-id/270923 "2021-04-22T10:18:04Z")

</div>

Logstash outputs below error log. \[2021-04-22T15:00:43,643\]\[WARN \]\[logstash.outputs.elasticsearch\]\[＜pipeline id＞\] Could not index event to Elasticsearch. {:status=\>400, :action=\>\["index", {:\_id=\>nil, :\_index=\>"＜index na…

---

## [Closed index error](https://discuss.elastic.co/t/closed-index-error/142557)

<div class="topic-metadata">

**Author:** [@rso249](https://discuss.elastic.co/u/rso249)\
**Replies:** 2\
**Last updated:** [August 2, 2018, 1:52pm UTC](https://discuss.elastic.co/t/closed-index-error/142557 "2018-08-02T13:52:33Z")

</div>

Dear all, latelly I get the following unexpected error: index\_closed\_exception. I dont really why... I recently have also added alias names to my indexes. Is that causing the problem? After I recreate the indexes I am al…

---

## [Deprecated field \[\_routing\] used, expected \[routing\] instead](https://discuss.elastic.co/t/deprecated-field-routing-used-expected-routing-instead/115951)

<div class="topic-metadata">

**Author:** [@JJK](https://discuss.elastic.co/u/JJK)\
**Replies:** 2\
**Last updated:** [January 18, 2018, 4:19am UTC](https://discuss.elastic.co/t/deprecated-field-routing-used-expected-routing-instead/115951 "2018-01-18T04:19:17Z")

</div>

Getting the following warning with 6.1.2: \[WARN \]\[org.elasticsearch.deprecation.common.ParseField\] Deprecated field \[\_routing\] used, expected \[routing\] instead But the docs still show that \_routing is correct? https:/…

---

## [\[Solved\] Rolling upgrade 7.6.1 -\> 7.9.0 suddenly failed on node: Java error?](https://discuss.elastic.co/t/solved-rolling-upgrade-7-6-1-7-9-0-suddenly-failed-on-node-java-error/247217)

<div class="topic-metadata">

**Author:** [@alexolivan](https://discuss.elastic.co/u/alexolivan)\
**Replies:** 4\
**Last updated:** [September 3, 2020, 8:33am UTC](https://discuss.elastic.co/t/solved-rolling-upgrade-7-6-1-7-9-0-suddenly-failed-on-node-java-error/247217 "2020-09-03T08:33:41Z")

</div>

Hi... I'm doing a rolling upgrade... overall, never had an issue with this.. The cluster is 7.6.1 and I'm going to latest 7.9.0 All nodes are identical machines: Debian stable machines... so far so good. I tried upgra…

---

## [Metricbeat 7.4 index not created daily](https://discuss.elastic.co/t/metricbeat-7-4-index-not-created-daily/226728)

<div class="topic-metadata">

**Author:** [@Kawther](https://discuss.elastic.co/u/Kawther)\
**Replies:** 4\
**Last updated:** [April 9, 2020, 11:15am UTC](https://discuss.elastic.co/t/metricbeat-7-4-index-not-created-daily/226728 "2020-04-09T11:15:23Z")

</div>

Hello, I upgraded metricbeat from 6 to 7.4 . I have this problem , I realized that the index is only created with the date you started the service I want to use the old format \<beat-type\>-\<hostname\>-\<date\> GET \_ca…

---

## [What does Setrefresh do while index a document?](https://discuss.elastic.co/t/what-does-setrefresh-do-while-index-a-document/12277)

<div class="topic-metadata">

**Author:** [@Arjit\_Gupta](https://discuss.elastic.co/u/Arjit_Gupta)\
**Replies:** 4\
**Last updated:** [August 25, 2015, 7:52am UTC](https://discuss.elastic.co/t/what-does-setrefresh-do-while-index-a-document/12277 "2015-08-25T07:52:50Z")

</div>

Hi, I am new to elastic search. I just want to know what does setrefresh do ? from the docs http://www.elasticsearch.org/guide/reference/api/index\_/ It says it makes it available to search. I am interested in …

---

## [How to use script parameters of elasticsearch output plugin？](https://discuss.elastic.co/t/how-to-use-script-parameters-of-elasticsearch-output-plugin/80783)

<div class="topic-metadata">

**Author:** [@qin](https://discuss.elastic.co/u/qin)\
**Replies:** 0\
**Last updated:** [March 31, 2017, 8:04am UTC](https://discuss.elastic.co/t/how-to-use-script-parameters-of-elasticsearch-output-plugin/80783 "2017-03-31T08:04:28Z")

</div>

Lostash elasticsearch output plugin, how to use script、scripted\_upsert and script\_type parameters? Can give an example?

---

## [IIS Filebeat Module - Settings for Ignore Older?](https://discuss.elastic.co/t/iis-filebeat-module-settings-for-ignore-older/157186)

<div class="topic-metadata">

**Author:** [@Brett\_Larson](https://discuss.elastic.co/u/Brett_Larson)\
**Replies:** 1\
**Last updated:** [November 21, 2018, 2:13pm UTC](https://discuss.elastic.co/t/iis-filebeat-module-settings-for-ignore-older/157186 "2018-11-21T14:13:57Z")

</div>

Hello, Does the IIS module for Filebeat support the ignore\_older: setting? I'm unclear based on reading the documentation. Thank you!

---

## [Remove timezone/timestamp from my data field?](https://discuss.elastic.co/t/remove-timezone-timestamp-from-my-data-field/222768)

<div class="topic-metadata">

**Author:** [@samargh](https://discuss.elastic.co/u/samargh)\
**Replies:** 6\
**Last updated:** [March 10, 2020, 10:17am UTC](https://discuss.elastic.co/t/remove-timezone-timestamp-from-my-data-field/222768 "2020-03-10T10:17:00Z")

</div>

how can i delete the timezone/timestamp from my data field ? i need it to get only : Disconnection Date Sep 16, 2020 not this !! Disconnection Date Sep 16, 2020 @ 23:00:00.000 Activation Date Aug 13, 2019 @ 23:00:00.…

---

## [Custom logstash image fails with java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/custom-logstash-image-fails-with-java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-systemexit-exit/178318)

<div class="topic-metadata">

**Author:** [@Pouria\_Fewzee](https://discuss.elastic.co/u/Pouria_Fewzee)\
**Replies:** 6\
**Last updated:** [April 25, 2019, 12:59am UTC](https://discuss.elastic.co/t/custom-logstash-image-fails-with-java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-systemexit-exit/178318 "2019-04-25T00:59:20Z")

</div>

Hi, the following is my logstash.conf and logstash.yml files: logstash.conf input { beats { port =\> 5044 } } filter {} output { http { http\_mehod =\> "post" url =\> "https://dydx.ngrok.io" } } logstash.yml http…

[Previous page](https://discuss.elastic.co/top.md?page=926&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=928&per_page=50&period=all)
