# Top **URL:** https://discuss.elastic.co/top.md?page=937&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 938 --- ## [Prioritize exact match using nGram](https://discuss.elastic.co/t/prioritize-exact-match-using-ngram/15372)
**Author:** [@Nikhil\_Podduturi](https://discuss.elastic.co/u/Nikhil_Podduturi)\ **Replies:** 1\ **Last updated:** [January 23, 2014, 6:24pm UTC](https://discuss.elastic.co/t/prioritize-exact-match-using-ngram/15372 "2014-01-23T18:24:35Z")
Hello All, I am wondering how to rank exact match higher than the nGram matches. For example: search string: \*abcd\* results - abcd, abcde, abcdegl not in a particular order. But I want to rank 'abcd' hig… --- ## [Kibana Table - Cell Text gets truncated](https://discuss.elastic.co/t/kibana-table-cell-text-gets-truncated/330407)
**Author:** [@mukesh\_pallapothu](https://discuss.elastic.co/u/mukesh_pallapothu)\ **Replies:** 8\ **Last updated:** [April 25, 2023, 2:12pm UTC](https://discuss.elastic.co/t/kibana-table-cell-text-gets-truncated/330407 "2023-04-25T14:12:09Z")
Hi Elastic Gurus, I have created a table in Kibana Dashboard and some cells have large amount of text. Is there a text wrap functionality or ability to resize the cell so that we can view the full data without get trim… --- ## [Discrepancy with Data Indexing, Processed records and Time Stamp for ML Job](https://discuss.elastic.co/t/discrepancy-with-data-indexing-processed-records-and-time-stamp-for-ml-job/100907)
**Author:** [@Rohithnama](https://discuss.elastic.co/u/Rohithnama)\ **Replies:** 8\ **Last updated:** [September 19, 2017, 7:05pm UTC](https://discuss.elastic.co/t/discrepancy-with-data-indexing-processed-records-and-time-stamp-for-ml-job/100907 "2017-09-19T19:05:58Z")
I'm working towards creating an ML job through the Kibana UI as well as using the ML wrapper API that we developed internally. Using the wrapper, first I'm indexing all the test data and then starting the job as well as… --- ## [Unable to start filebeat service](https://discuss.elastic.co/t/unable-to-start-filebeat-service/303089)
**Author:** [@Bhagavat\_Bhise](https://discuss.elastic.co/u/Bhagavat_Bhise)\ **Replies:** 2\ **Last updated:** [April 26, 2022, 2:36pm UTC](https://discuss.elastic.co/t/unable-to-start-filebeat-service/303089 "2022-04-26T14:36:56Z")
Hi Team, I am facing an issue while starting filebeat service, getting below error. Would you please help me on this? Please find below details for your help. Apr 24 08:45:55 elku systemd\[1\]: filebeat.service: Main p… --- ## [Elasticsearch 6.2 service failed to start](https://discuss.elastic.co/t/elasticsearch-6-2-service-failed-to-start/216898)
**Author:** [@csrowell](https://discuss.elastic.co/u/csrowell)\ **Replies:** 2\ **Last updated:** [January 31, 2020, 2:40pm UTC](https://discuss.elastic.co/t/elasticsearch-6-2-service-failed-to-start/216898 "2020-01-31T14:40:27Z")
We did Windows updates this month and are now getting these errors: Windows Event Log: The Elasticsearch 6.2.4 (elasticsearch-service-x64) service terminated with the following service-specific error: Incorrect functi… --- ## [Maximum shards open 3000；es 7.3.0](https://discuss.elastic.co/t/maximum-shards-open-3000-es-7-3-0/205167)
**Author:** [@xyx](https://discuss.elastic.co/u/xyx)\ **Replies:** 2\ **Last updated:** [October 25, 2019, 6:03am UTC](https://discuss.elastic.co/t/maximum-shards-open-3000-es-7-3-0/205167 "2019-10-25T06:03:15Z")
today，my cluster has a warning ：maximum shards open 3000； How should I do？ --- ## [Reading a properties file using logstash](https://discuss.elastic.co/t/reading-a-properties-file-using-logstash/78440)
**Author:** [@kiranilla](https://discuss.elastic.co/u/kiranilla)\ **Replies:** 2\ **Last updated:** [March 14, 2017, 11:19am UTC](https://discuss.elastic.co/t/reading-a-properties-file-using-logstash/78440 "2017-03-14T11:19:12Z")
I am trying to to read a properties file using log stash, but getting some error as shown below Could you please help me in resolving this issue. As i want to read a properties file (using ruby code as shown in below s… --- ## [How to set "indices.fielddata.cache.size" without setting in elasticsearch.yml](https://discuss.elastic.co/t/how-to-set-indices-fielddata-cache-size-without-setting-in-elasticsearch-yml/14501)
**Author:** [@Greg\_4](https://discuss.elastic.co/u/Greg_4)\ **Replies:** 2\ **Last updated:** [November 20, 2013, 6:51pm UTC](https://discuss.elastic.co/t/how-to-set-indices-fielddata-cache-size-without-setting-in-elasticsearch-yml/14501 "2013-11-20T18:51:58Z")
Hi, i tried curl -XPUT :/\_cluster/settings -d '{ "persistent" : { "indices.fielddata.cache.size": "20%" } }' but it does not work: {"persistent":{},"transient":{}} Thanks. Greg … --- ## [Help with manging storage for a large index](https://discuss.elastic.co/t/help-with-manging-storage-for-a-large-index/272447)
**Author:** [@predev](https://discuss.elastic.co/u/predev)\ **Replies:** 5\ **Last updated:** [May 8, 2021, 5:32pm UTC](https://discuss.elastic.co/t/help-with-manging-storage-for-a-large-index/272447 "2021-05-08T17:32:14Z")
Hi, We are a new start-up going through development with no funding other than out our own pocket, I am hoping to seek some advice from others who are far more experienced than myself given we have only used Elasticsear… --- ## [How to rectify this error?](https://discuss.elastic.co/t/how-to-rectify-this-error/177588)
**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Replies:** 5\ **Last updated:** [April 19, 2019, 5:26pm UTC](https://discuss.elastic.co/t/how-to-rectify-this-error/177588 "2019-04-19T17:26:17Z")
\[INFO \] 2019-04-19 14:44:01.440 \[\[apachelogs\]\>worker10\] elasticsearch - retrying failed action with response code: 429 ({"type"=\>"es\_rejected\_execution\_exception", "reason"=\>"rejected execution of processing of \[17928\]\[i… --- ## [REST API for setting default landing page and index pattern for a space](https://discuss.elastic.co/t/rest-api-for-setting-default-landing-page-and-index-pattern-for-a-space/266412)
**Author:** [@umesh2020](https://discuss.elastic.co/u/umesh2020)\ **Replies:** 6\ **Last updated:** [March 9, 2021, 8:45pm UTC](https://discuss.elastic.co/t/rest-api-for-setting-default-landing-page-and-index-pattern-for-a-space/266412 "2021-03-09T20:45:24Z")
Hi Is there a REST API for setting the default landing page and index pattern for a space ? I want to programatically create a space and set these attributes. Thanks Umesha --- ## [Snapshot repository AWS S3 bucket via corporate proxy](https://discuss.elastic.co/t/snapshot-repository-aws-s3-bucket-via-corporate-proxy/261623)
**Author:** [@markn](https://discuss.elastic.co/u/markn)\ **Replies:** 6\ **Last updated:** [January 21, 2021, 3:25pm UTC](https://discuss.elastic.co/t/snapshot-repository-aws-s3-bucket-via-corporate-proxy/261623 "2021-01-21T15:25:58Z")
Hi, we run ECE in our own datacenters and internet access is only available via corporate proxy. The AWS S3 bucket works like a charm. ECE runs on RedHat Linux 7. We have configured the corporate proxy in: /usr/lib/syst… --- ## [Elasticsearch error: curl: (7) Failed to connect to localhost port 9200: Connection refused](https://discuss.elastic.co/t/elasticsearch-error-curl-7-failed-to-connect-to-localhost-port-9200-connection-refused/257313)
**Author:** [@webapps](https://discuss.elastic.co/u/webapps)\ **Replies:** 6\ **Last updated:** [December 2, 2020, 9:01am UTC](https://discuss.elastic.co/t/elasticsearch-error-curl-7-failed-to-connect-to-localhost-port-9200-connection-refused/257313 "2020-12-02T09:01:40Z")
I installed the elasticsearch in my local but when I tried to access this command curl -X GET http://localhost:9200/ it's giving me the error that the connection was refused. curl: (7) Failed to connect to localhost por… --- ## [ElasticSearch Nest query returning Null values for every field?](https://discuss.elastic.co/t/elasticsearch-nest-query-returning-null-values-for-every-field/284796)
**Author:** [@bensalerno](https://discuss.elastic.co/u/bensalerno)\ **Replies:** 1\ **Last updated:** [October 17, 2021, 11:28pm UTC](https://discuss.elastic.co/t/elasticsearch-nest-query-returning-null-values-for-every-field/284796 "2021-10-17T23:28:31Z")
I finally got my Nest client set up, however, the results of every field are populated as null instead of the expected values. I looked at these c# - ElasticSearch NEST - all fields are NULL - Stack Overflow and c# - NE… --- ## [Frequent OutOfMemory crashes](https://discuss.elastic.co/t/frequent-outofmemory-crashes/91458)
**Author:** [@BastiPaeltz](https://discuss.elastic.co/u/BastiPaeltz)\ **Replies:** 1\ **Last updated:** [July 7, 2017, 6:42am UTC](https://discuss.elastic.co/t/frequent-outofmemory-crashes/91458 "2017-07-07T06:42:31Z")
Hey, we upgraded our cluster (I described details in another post ) and now experience OutOfMemory errors way more frequently than before. ES serves as a logging cluster and is only used by a few developers. What usua… --- ## [Get the correct timestamp from the log file and set to @timestamp](https://discuss.elastic.co/t/get-the-correct-timestamp-from-the-log-file-and-set-to-timestamp/173821)
**Author:** [@Loudone](https://discuss.elastic.co/u/Loudone)\ **Replies:** 2\ **Last updated:** [March 27, 2019, 9:54am UTC](https://discuss.elastic.co/t/get-the-correct-timestamp-from-the-log-file-and-set-to-timestamp/173821 "2019-03-27T09:54:21Z")
Dear All, I'm currently trying to define log timestamp to @timestamp. But for some reasons, it seems not working properly my input log look like: \[25/Mar/2019:08:10:56 +0100\] GET "/foo/bar\_" 200 1 0 On logstash sid… --- ## [How can I connect Splunk to Elasticsearch without having to write scripts or re-index?](https://discuss.elastic.co/t/how-can-i-connect-splunk-to-elasticsearch-without-having-to-write-scripts-or-re-index/184840)
**Author:** [@tabkha](https://discuss.elastic.co/u/tabkha)\ **Replies:** 3\ **Last updated:** [June 9, 2019, 6:41am UTC](https://discuss.elastic.co/t/how-can-i-connect-splunk-to-elasticsearch-without-having-to-write-scripts-or-re-index/184840 "2019-06-09T06:41:39Z")
I'm moving from Splunk to Elastic but don't want to get rid of all the Splunk data at once, Im in a phase where I need Splunk and Elastic to talk to each others...Is that possible ? Are there any elastic connectors for S… --- ## [New Client Artifacts: Naming and Packaging problematic?](https://discuss.elastic.co/t/new-client-artifacts-naming-and-packaging-problematic/59228)
**Author:** [@ctrimble](https://discuss.elastic.co/u/ctrimble)\ **Replies:** 3\ **Last updated:** [August 30, 2016, 8:05am UTC](https://discuss.elastic.co/t/new-client-artifacts-naming-and-packaging-problematic/59228 "2016-08-30T08:05:07Z")
I tried out the new low level rest client this weekend and a couple of items jumped out at me, relating to the way the artifacts are structured. Didn't know if these should be feature requests, so I thought I would come… --- ## [Index status going to RED After I create index with this setting "index.routing.allocation.require.box\_type": "hot"](https://discuss.elastic.co/t/index-status-going-to-red-after-i-create-index-with-this-setting-index-routing-allocation-require-box-type-hot/180583)
**Author:** [@chandukreddi](https://discuss.elastic.co/u/chandukreddi)\ **Replies:** 4\ **Last updated:** [May 16, 2019, 3:55pm UTC](https://discuss.elastic.co/t/index-status-going-to-red-after-i-create-index-with-this-setting-index-routing-allocation-require-box-type-hot/180583 "2019-05-16T15:55:15Z")
Hello Team, I have 2 node cluster and one node is HOT and another node WARM. Help me to understand why index status changing to RED when I use setting "index.routing.allocation.require.box\_type": "hot" Index creation … --- ## [Kibana not showing data from Elasticsearch](https://discuss.elastic.co/t/kibana-not-showing-data-from-elasticsearch/35335)
**Author:** [@bibikmik](https://discuss.elastic.co/u/bibikmik)\ **Replies:** 4\ **Last updated:** [November 25, 2015, 8:23am UTC](https://discuss.elastic.co/t/kibana-not-showing-data-from-elasticsearch/35335 "2015-11-25T08:23:09Z")
Hi Everyone, Configuration: elasticsearch: 1.7.3 logstash: 1.5.4 kibana: 4.1.3 Logstash using log4j input, getting logs from some application and sends data to Elasticsearch. With different plugins I c… --- ## [How to store current date](https://discuss.elastic.co/t/how-to-store-current-date/22323)
**Author:** [@tao\_hiko](https://discuss.elastic.co/u/tao_hiko)\ **Replies:** 4\ **Last updated:** [February 24, 2015, 4:18am UTC](https://discuss.elastic.co/t/how-to-store-current-date/22323 "2015-02-24T04:18:40Z")
If I have mapping as below { "name" : { "type" : "string"}, "location" : { "type" : "string" }, "created\_date" : { "type" : "date"} } Is it possible to put current date to "created\_date" field aut… --- ## [Creating different indexes for different modules from filebeat](https://discuss.elastic.co/t/creating-different-indexes-for-different-modules-from-filebeat/290499)
**Author:** [@Lenny](https://discuss.elastic.co/u/Lenny)\ **Replies:** 7\ **Last updated:** [November 30, 2021, 7:47pm UTC](https://discuss.elastic.co/t/creating-different-indexes-for-different-modules-from-filebeat/290499 "2021-11-30T19:47:50Z")
Hello, I'm very new to elk stack so please bear with me. I'm learning Elastic Stack from scratch and I have paid for and taken a few classes, but none of the classes I have gone through seem to go very in depth for the i… --- ## [Filebeat Drop field doesnt work for json](https://discuss.elastic.co/t/filebeat-drop-field-doesnt-work-for-json/248432)
**Author:** [@niv](https://discuss.elastic.co/u/niv)\ **Replies:** 7\ **Last updated:** [September 16, 2020, 5:48pm UTC](https://discuss.elastic.co/t/filebeat-drop-field-doesnt-work-for-json/248432 "2020-09-16T17:48:49Z")
filebeat.inputs: - type: log enabled: true paths: - "\*.json" processors: - drop\_fields: fields: \["value"\] \`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\`\` That's my filebeat yml file. the drop fields d… --- ## [Filebeat + Kafka error](https://discuss.elastic.co/t/filebeat-kafka-error/109361)
**Author:** [@kamandohl](https://discuss.elastic.co/u/kamandohl)\ **Replies:** 1\ **Last updated:** [November 28, 2017, 2:39pm UTC](https://discuss.elastic.co/t/filebeat-kafka-error/109361 "2017-11-28T14:39:50Z")
I have Googled enough, but unable to find the error I am currently seeing. Filebeat - 5.6.4 and 6.0.0 Kafka - 10.1 2017/11/27 13:10:03.602226 log.go:16: WARN kafka message: Initializing new client 2017/11/27 13:10:0… --- ## [For Jest Client Implementation\[How to add sslcontext class patch to the httclient-osgi jar](https://discuss.elastic.co/t/for-jest-client-implementation-how-to-add-sslcontext-class-patch-to-the-httclient-osgi-jar/35877)
**Author:** [@balubollam](https://discuss.elastic.co/u/balubollam)\ **Replies:** 1\ **Last updated:** [December 17, 2015, 5:43pm UTC](https://discuss.elastic.co/t/for-jest-client-implementation-how-to-add-sslcontext-class-patch-to-the-httclient-osgi-jar/35877 "2015-12-17T17:43:19Z")
HI Everyone I am implementing Jest client for Amazon client client connection.But iam getting this following error:Exception in thread "main" java.lang.NoClassDefFoundError: org/apache/http/ssl/SSLContexts at org.ap… --- ## [Build Custom RPM and DEB packages](https://discuss.elastic.co/t/build-custom-rpm-and-deb-packages/254275)
**Author:** [@Domenico](https://discuss.elastic.co/u/Domenico)\ **Replies:** 5\ **Last updated:** [November 6, 2020, 10:39am UTC](https://discuss.elastic.co/t/build-custom-rpm-and-deb-packages/254275 "2020-11-06T10:39:27Z")
Hi, we need to build rpm and deb packages with custom binary and service names. I have searched for a way to build from source code but most of the posts/topics are related to old versions and have broken link to github. … --- ## [Need info regarding Kibana Timelion Remote Code Execution issue (ESA-2019-02)](https://discuss.elastic.co/t/need-info-regarding-kibana-timelion-remote-code-execution-issue-esa-2019-02/174619)
**Author:** [@fragatina](https://discuss.elastic.co/u/fragatina)\ **Replies:** 5\ **Last updated:** [April 4, 2019, 1:06pm UTC](https://discuss.elastic.co/t/need-info-regarding-kibana-timelion-remote-code-execution-issue-esa-2019-02/174619 "2019-04-04T13:06:17Z")
Hi, I'm evaluating the Kibana Timelion Remote Code Execution issue (ESA-2019-02) CVE from: I'd really appreciate if somebody could point out to the GitHub patch for this fix. Thanks. --- ## [Term panel in Kibana breaks the field value based on hyphen('-),space(' ') and on many more](https://discuss.elastic.co/t/term-panel-in-kibana-breaks-the-field-value-based-on-hyphen-space-and-on-many-more/46096)
**Author:** [@Rajeev\_Gaurav](https://discuss.elastic.co/u/Rajeev_Gaurav)\ **Replies:** 5\ **Last updated:** [May 12, 2016, 4:15pm UTC](https://discuss.elastic.co/t/term-panel-in-kibana-breaks-the-field-value-based-on-hyphen-space-and-on-many-more/46096 "2016-05-12T16:15:08Z")
Log stash is reading the file and sending it to kibana but the terms panel split the field value (for eg. prod-Mumbai-22201 in to three field values such as prod, Mumbai,22201). Kindly help me so that I can resolve it p… --- ## [Kibana Service is not ready yet](https://discuss.elastic.co/t/kibana-service-is-not-ready-yet/310017)
**Author:** [@Morne\_Marnewick](https://discuss.elastic.co/u/Morne_Marnewick)\ **Replies:** 8\ **Last updated:** [July 21, 2022, 5:20am UTC](https://discuss.elastic.co/t/kibana-service-is-not-ready-yet/310017 "2022-07-21T05:20:57Z")
Good day, I'm new with ELK and its features. I've recently taken over my predecessors ELK server and it just started giving issues today. "Kibana server is not ready yet" is what it displays. server.port: 5601 server… --- ## [Elasticsearch will no start](https://discuss.elastic.co/t/elasticsearch-will-no-start/202045)
**Author:** [@Bubba\_Shakes](https://discuss.elastic.co/u/Bubba_Shakes)\ **Replies:** 0\ **Last updated:** [October 2, 2019, 8:02pm UTC](https://discuss.elastic.co/t/elasticsearch-will-no-start/202045 "2019-10-02T20:02:16Z")
Rebooted the server, ubuntu 1804 and now elasticsearch will not start and I can't determine why, was working fine before the reboot, java issue?. Below is the error and log: ● elasticsearch.service - Elasticsearch Lo… --- ## [Kibana server is not ready](https://discuss.elastic.co/t/kibana-server-is-not-ready/181803)
**Author:** [@abhishek\_Shetty](https://discuss.elastic.co/u/abhishek_Shetty)\ **Replies:** 3\ **Last updated:** [May 21, 2019, 5:05am UTC](https://discuss.elastic.co/t/kibana-server-is-not-ready/181803 "2019-05-21T05:05:24Z")
Hi all, I have installed latest version of Elastic search and Kibana on red hat 7.6, both services are running but I am unable to connect to kibana from browser which is giving Kibana server is not ready yet. I saw erro… --- ## [Reporting missing from Dashboard and Visualize](https://discuss.elastic.co/t/reporting-missing-from-dashboard-and-visualize/151370)
**Author:** [@mshaf](https://discuss.elastic.co/u/mshaf)\ **Replies:** 3\ **Last updated:** [October 9, 2018, 8:05am UTC](https://discuss.elastic.co/t/reporting-missing-from-dashboard-and-visualize/151370 "2018-10-09T08:05:48Z")
I am on Kibana 6.4. I do not have the 'Reporting' option on my dashboard or Visualize pages. The reporting option is there for the Discover page but not others. Anyone know why this might happen? --- ## [MoreLikeThis query, what does percent\_terms\_to\_match do?](https://discuss.elastic.co/t/morelikethis-query-what-does-percent-terms-to-match-do/7789)
**Author:** [@Nick\_Dunn](https://discuss.elastic.co/u/Nick_Dunn)\ **Replies:** 3\ **Last updated:** [May 25, 2012, 10:44pm UTC](https://discuss.elastic.co/t/morelikethis-query-what-does-percent-terms-to-match-do/7789 "2012-05-25T22:44:34Z")
I'm trying out morelikethis (http://www.elasticsearch.org/guide/reference/query-dsl/mlt-query.html) and it's working well. So easy :-) I'm finding entries by related tags so I dropped \`min\_doc\_freq\` to 1 (one or… --- ## [Way to limit # of documents or storage size per node](https://discuss.elastic.co/t/way-to-limit-of-documents-or-storage-size-per-node/5165)
**Author:** [@monit06](https://discuss.elastic.co/u/monit06)\ **Replies:** 3\ **Last updated:** [August 15, 2011, 9:52pm UTC](https://discuss.elastic.co/t/way-to-limit-of-documents-or-storage-size-per-node/5165 "2011-08-15T21:52:31Z")
Hi Guys, I have 2 nodes with different size of available disk, one with 500g and another with 200g.. but on both nodes I can just use 50% for elasticsearch.. Is there a way to limit # of documents or storage size… --- ## [Scripted fields - matcher vs =~ different results](https://discuss.elastic.co/t/scripted-fields-matcher-vs-different-results/169257)
**Author:** [@David\_Ocana](https://discuss.elastic.co/u/David_Ocana)\ **Replies:** 4\ **Last updated:** [February 20, 2019, 9:44pm UTC](https://discuss.elastic.co/t/scripted-fields-matcher-vs-different-results/169257 "2019-02-20T21:44:09Z")
Hi everyone, Running ElasticSearch 6.3.0, Kibana and fluentd. We are trying to extract some information from a field called log: "log": { "type": "text", "fields": { "keyword": { "… --- ## [Configure Kibana(in windows) to start automatically when the server boots/restarts](https://discuss.elastic.co/t/configure-kibana-in-windows-to-start-automatically-when-the-server-boots-restarts/162987)
**Author:** [@sid\_nikhil](https://discuss.elastic.co/u/sid_nikhil)\ **Replies:** 2\ **Last updated:** [January 7, 2019, 5:48am UTC](https://discuss.elastic.co/t/configure-kibana-in-windows-to-start-automatically-when-the-server-boots-restarts/162987 "2019-01-07T05:48:15Z")
I know how to host kibana on command prompt . But we need to install Kibana on servers , and ensure that kibana starts automatically when the server restarts . I hosted kibana on servers using command prompt , but the p… --- ## [Creating Arrays of Nested Objects using the Spark Connector](https://discuss.elastic.co/t/creating-arrays-of-nested-objects-using-the-spark-connector/135412)
**Author:** [@mike\_metistream](https://discuss.elastic.co/u/mike_metistream)\ **Replies:** 2\ **Last updated:** [June 21, 2018, 5:19pm UTC](https://discuss.elastic.co/t/creating-arrays-of-nested-objects-using-the-spark-connector/135412 "2018-06-21T17:19:33Z")
I have a Spark DataFrame of the schema: |-- ROW\_ID: string (nullable = true) |-- SUBJECT\_ID: string (nullable = true) |-- HADM\_ID: string (nullable = true) |-- CHARTDATE: string (nullable = true) |-- CHARTTIME: str… --- ## [How to configure max file descriptors on windows OS?](https://discuss.elastic.co/t/how-to-configure-max-file-descriptors-on-windows-os/23272)
**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\ **Replies:** 2\ **Last updated:** [April 20, 2015, 2:38pm UTC](https://discuss.elastic.co/t/how-to-configure-max-file-descriptors-on-windows-os/23272 "2015-04-20T14:38:39Z")
Anyone knows how to change the max\_file\_descriptors on windows? I built ES cluster on Windows and got following process information: "max\_file\_descriptors" : -1, "open\_file\_descriptors" : -1, What does “-1 mean? … --- ## [Difference between docs stored and indexed](https://discuss.elastic.co/t/difference-between-docs-stored-and-indexed/9868)
**Author:** [@Konstantin\_Krauss](https://discuss.elastic.co/u/Konstantin_Krauss)\ **Replies:** 2\ **Last updated:** [November 28, 2012, 5:21pm UTC](https://discuss.elastic.co/t/difference-between-docs-stored-and-indexed/9868 "2012-11-28T17:21:35Z")
Hi, looking at my \_stats I can find the following informations: \_all: { primaries: { docs: { count: 8617, deleted: 47 }, indexing: { index\_total: 9017, index\_time: "2.3… --- ## [Create query help](https://discuss.elastic.co/t/create-query-help/141163)
**Author:** [@lebilien](https://discuss.elastic.co/u/lebilien)\ **Replies:** 6\ **Last updated:** [July 24, 2018, 10:24am UTC](https://discuss.elastic.co/t/create-query-help/141163 "2018-07-24T10:24:00Z")
hi i have the question about the query i have the information with the keyword with a date and a position i want all the keyword one a range date and where the position of the first date is superior of the position in … --- ## [Aggregation on comma separated text field](https://discuss.elastic.co/t/aggregation-on-comma-separated-text-field/74791)
**Author:** [@sharatj](https://discuss.elastic.co/u/sharatj)\ **Replies:** 1\ **Last updated:** [February 13, 2017, 7:34pm UTC](https://discuss.elastic.co/t/aggregation-on-comma-separated-text-field/74791 "2017-02-13T19:34:16Z")
I have a field that contains comma separated values. I am trying to find the right way to define the tokenizer and analyzer so that I can aggregate on the individual values of the field instead of the entire value. I w… --- ## [Filebeat syslog with wrong @timestamp](https://discuss.elastic.co/t/filebeat-syslog-with-wrong-timestamp/195454)
**Author:** [@ntlong](https://discuss.elastic.co/u/ntlong)\ **Replies:** 4\ **Last updated:** [September 10, 2019, 9:28pm UTC](https://discuss.elastic.co/t/filebeat-syslog-with-wrong-timestamp/195454 "2019-09-10T21:28:40Z")
Hi everyone, I am very new with all of elastic stack, so i hope that you guy can help in details. I am trying to configure filebeat to send syslog directly to elasticsearch, however, the @timestamp of each entry seem t… --- ## [Replace dots in field names for ES 2.0](https://discuss.elastic.co/t/replace-dots-in-field-names-for-es-2-0/32206)
**Author:** [@juerkan](https://discuss.elastic.co/u/juerkan)\ **Replies:** 3\ **Last updated:** [October 28, 2015, 1:36pm UTC](https://discuss.elastic.co/t/replace-dots-in-field-names-for-es-2-0/32206 "2015-10-28T13:36:11Z")
Dear logstash pro's We produce logs and we use logstash to bring it into elasticsearch. There hundrets of dynamic produced field names with a dot inside. (not nestet fields) And we have field names with no dots. for exam… --- ## [Clone plugin documentation wrong or a bug?](https://discuss.elastic.co/t/clone-plugin-documentation-wrong-or-a-bug/142156)
**Author:** [@dennis300481](https://discuss.elastic.co/u/dennis300481)\ **Replies:** 5\ **Last updated:** [August 30, 2018, 10:56am UTC](https://discuss.elastic.co/t/clone-plugin-documentation-wrong-or-a-bug/142156 "2018-08-30T10:56:00Z")
I was trying to use the following config: filter { clone { add\_tag =\> \[ "cloned" \] } } This is not doing what i expect. My expectation is, that this will clone the current event and the cloned one has a tag "clone… --- ## [CA Signed Certificate Not Working](https://discuss.elastic.co/t/ca-signed-certificate-not-working/46523)
**Author:** [@ltwarner](https://discuss.elastic.co/u/ltwarner)\ **Replies:** 5\ **Last updated:** [April 7, 2016, 2:07pm UTC](https://discuss.elastic.co/t/ca-signed-certificate-not-working/46523 "2016-04-07T14:07:04Z")
Hey there, I am working to setup a Logstash and Beats (file and winlog). I have everything working for a self-signed certificate on LogStash and Beats , but if I try to create a CA signed Certificate I keep getting on… --- ## [Definition for "skipped" in "\_shards" as query result](https://discuss.elastic.co/t/definition-for-skipped-in-shards-as-query-result/159841)
**Author:** [@junkoshimane](https://discuss.elastic.co/u/junkoshimane)\ **Replies:** 2\ **Last updated:** [December 13, 2018, 1:54am UTC](https://discuss.elastic.co/t/definition-for-skipped-in-shards-as-query-result/159841 "2018-12-13T01:54:59Z")
Hi all, Regarding "skipped" in "\_shards" as query result, it is defined nowhere even in the following URL. https://www.elastic.co/guide/en/elasticsearch/reference/current/\_the\_search\_api.html { "took" : 5, "timed\_… --- ## [Change table font size visualize object](https://discuss.elastic.co/t/change-table-font-size-visualize-object/124528)
**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\ **Replies:** 2\ **Last updated:** [March 20, 2018, 1:44pm UTC](https://discuss.elastic.co/t/change-table-font-size-visualize-object/124528 "2018-03-20T13:44:36Z")
I would like to change font size on visulize object. How can I do this? { "aggs": \[ { "id": "1", "schema": "metric", "type": "count" }, { "id": "2", "params": { "field": "home", "order": "desc", "orderBy": "… --- ## [Native authentication showing up even if it is disabled](https://discuss.elastic.co/t/native-authentication-showing-up-even-if-it-is-disabled/91446)
**Author:** [@g-vamp](https://discuss.elastic.co/u/g-vamp)\ **Replies:** 2\ **Last updated:** [July 5, 2017, 2:05pm UTC](https://discuss.elastic.co/t/native-authentication-showing-up-even-if-it-is-disabled/91446 "2017-07-05T14:05:53Z")
Hi guys, I currently have an ELK stack running with x-pack installed on both Elasticsearch and Kibana. My elasticsearch.yml config looks a bit like this: xpack.graph.enabled: false xpack.ml.enabled: false xpack.mon… --- ## [Elasticsearch failed to start](https://discuss.elastic.co/t/elasticsearch-failed-to-start/247409)
**Author:** [@Bigranawab](https://discuss.elastic.co/u/Bigranawab)\ **Replies:** 7\ **Last updated:** [September 4, 2020, 8:57am UTC](https://discuss.elastic.co/t/elasticsearch-failed-to-start/247409 "2020-09-04T08:57:47Z")
Hi, My elasticsearch instance was working just fine, I made some changes to elasticsearch.yml file for email setting and restarted service, but elasticsearch failed to start and I could not even connect to elasticsearch… --- ## [Help with the logstash ruby filter.Ruby exception occurred: undefined method \`time' for 1546441403:Fixnum](https://discuss.elastic.co/t/help-with-the-logstash-ruby-filter-ruby-exception-occurred-undefined-method-time-for-1546441403-fixnum/162676)
**Author:** [@simmonHuong](https://discuss.elastic.co/u/simmonHuong)\ **Replies:** 1\ **Last updated:** [January 2, 2019, 5:18pm UTC](https://discuss.elastic.co/t/help-with-the-logstash-ruby-filter-ruby-exception-occurred-undefined-method-time-for-1546441403-fixnum/162676 "2019-01-02T17:18:20Z")
filter { if \[is\_try\] == 1 { drop { } } ruby { code =\> " fmt = '%Y-%m-%dT%H:%M:%S.%L%z' tz = '+08:00' create\_time = event.get('\[create\_time\]').time … [Previous page](https://discuss.elastic.co/top.md?page=936&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=938&per_page=50&period=all)