# Top

**URL:** https://discuss.elastic.co/top.md?page=95&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 96

---

## [Is this a right way to do performance evaluation?](https://discuss.elastic.co/t/is-this-a-right-way-to-do-performance-evaluation/43476)

<div class="topic-metadata">

**Author:** [@Kramer\_Li](https://discuss.elastic.co/u/Kramer_Li)\
**Replies:** 14\
**Last updated:** [March 8, 2016, 2:27am UTC](https://discuss.elastic.co/t/is-this-a-right-way-to-do-performance-evaluation/43476 "2016-03-08T02:27:58Z")

</div>

Hi I am doing a performance evaluation with 2 queries. The purpose is to figure out how many docs one node can process. But Im not sure if Im using the correct way to test. Also not sure if the conclusion I got is corre…

---

## [Change in ES 2.x (vs 1.x) for multiword exact match, for right-to-left languages (Arabic)?](https://discuss.elastic.co/t/change-in-es-2-x-vs-1-x-for-multiword-exact-match-for-right-to-left-languages-arabic/46882)

<div class="topic-metadata">

**Author:** [@aaron\_ximm](https://discuss.elastic.co/u/aaron_ximm)\
**Replies:** 17\
**Last updated:** [April 11, 2016, 8:18pm UTC](https://discuss.elastic.co/t/change-in-es-2-x-vs-1-x-for-multiword-exact-match-for-right-to-left-languages-arabic/46882 "2016-04-11T20:18:43Z")

</div>

Hi, First post here \[:slight\_smile:\] I work on plain-text search (of metadata) at the Internet Archive. I am in the process of testing 2.x for migration from our existing production 1.7.x cluster, to 2.x (now on 2.…

---

## [Where is my \_rev field](https://discuss.elastic.co/t/where-is-my--rev-field/44860)

<div class="topic-metadata">

**Author:** [@imad](https://discuss.elastic.co/u/imad)\
**Replies:** 17\
**Last updated:** [March 23, 2016, 3:13pm UTC](https://discuss.elastic.co/t/where-is-my--rev-field/44860 "2016-03-23T15:13:28Z")

</div>

Hi, I am using logstash to put my data from couchdb into elasticsearch. I just noticed that my \_rev field in not ported to elasticsearch. Do I need to do something special to have that in elasticsearch. Prompt help wil…

---

## [Unable to use coordinates map](https://discuss.elastic.co/t/unable-to-use-coordinates-map/177609)

<div class="topic-metadata">

**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\
**Replies:** 35\
**Last updated:** [April 26, 2019, 10:18am UTC](https://discuss.elastic.co/t/unable-to-use-coordinates-map/177609 "2019-04-26T10:18:59Z")

</div>

Although I am having all the information regarding geo locations but when I am trying to visualize it in kibana it says: No Compatible Fields: The logstash\_apchelogs index pattern does not contain any of the following …

---

## [Elasticsearch-php + AWS Elasticsearch](https://discuss.elastic.co/t/elasticsearch-php-aws-elasticsearch/133419)

<div class="topic-metadata">

**Author:** [@vojtamares](https://discuss.elastic.co/u/vojtamares)\
**Replies:** 9\
**Last updated:** [June 11, 2018, 10:50am UTC](https://discuss.elastic.co/t/elasticsearch-php-aws-elasticsearch/133419 "2018-06-11T10:50:18Z")

</div>

Hi! I am considering moving our elasticsearch to AWS (it is much easier to maintain - since I don't have to maintain it at all). I have a PHP application and for connection to elastic I am using elastic/elasticsearch-p…

---

## [Huge monitoring-es indexes](https://discuss.elastic.co/t/huge-monitoring-es-indexes/285102)

<div class="topic-metadata">

**Author:** [@Daniele\_Renda](https://discuss.elastic.co/u/Daniele_Renda)\
**Replies:** 10\
**Last updated:** [October 10, 2021, 11:06pm UTC](https://discuss.elastic.co/t/huge-monitoring-es-indexes/285102 "2021-10-10T23:06:44Z")

</div>

Today my ES cluster on Elastic cloud frozen due to high CPU consumption. There was not too much pressure with requests so I took a look at indexes to check if there is some problem. I found a lot of old indexes from apm…

---

## [Logstash not getting any syslog](https://discuss.elastic.co/t/logstash-not-getting-any-syslog/38631)

<div class="topic-metadata">

**Author:** [@simroo](https://discuss.elastic.co/u/simroo)\
**Replies:** 10\
**Last updated:** [January 15, 2016, 7:58am UTC](https://discuss.elastic.co/t/logstash-not-getting-any-syslog/38631 "2016-01-15T07:58:52Z")

</div>

Hello I have just installed ELK on my Linux Debian, and i can access kibana. But i just seem to get No results found :(. I have config a fortigate firewall and juniper switch to syslog everything to the server. But sti…

---

## [Attachment is not getting parsed](https://discuss.elastic.co/t/attachment-is-not-getting-parsed/49721)

<div class="topic-metadata">

**Author:** [@Piyush\_Giri](https://discuss.elastic.co/u/Piyush_Giri)\
**Replies:** 16\
**Last updated:** [May 13, 2016, 12:50am UTC](https://discuss.elastic.co/t/attachment-is-not-getting-parsed/49721 "2016-05-13T00:50:16Z")

</div>

//using iTextSharp.text; //using iTextSharp.text.pdf; using Nest; using System; using System.Collections.Generic; using System.IO; using System.Linq; using System.Text; using System.Threading.Tasks; namespace ConsoleAppl…

---

## [Set up dashboards for Logstash Output](https://discuss.elastic.co/t/set-up-dashboards-for-logstash-output/278989)

<div class="topic-metadata">

**Author:** [@diegz](https://discuss.elastic.co/u/diegz)\
**Replies:** 18\
**Last updated:** [July 21, 2021, 10:07am UTC](https://discuss.elastic.co/t/set-up-dashboards-for-logstash-output/278989 "2021-07-21T10:07:46Z")

</div>

Hi community, I would like to enable dashboards in kibana for metricbeat, heartbeat, filebeat and winlogbeat. On the documentation it says to pass these commands when logstash is in output. What are the settings when …

---

## [Java api fail\_on\_symbol\_hash\_overflow error](https://discuss.elastic.co/t/java-api-fail-on-symbol-hash-overflow-error/80708)

<div class="topic-metadata">

**Author:** [@Jeremy\_Cugmas](https://discuss.elastic.co/u/Jeremy_Cugmas)\
**Replies:** 16\
**Last updated:** [April 4, 2017, 1:38am UTC](https://discuss.elastic.co/t/java-api-fail-on-symbol-hash-overflow-error/80708 "2017-04-04T01:38:16Z")

</div>

Hello everyone, I'm coming to you because i have some issues in my development of the integration of the JAVA API on my application. When I hit the endpoint which use the ELK Java API, I have this famous error : j…

---

## [Update Marvel license failed](https://discuss.elastic.co/t/update-marvel-license-failed/38495)

<div class="topic-metadata">

**Author:** [@OlivierD](https://discuss.elastic.co/u/OlivierD)\
**Replies:** 10\
**Last updated:** [January 14, 2017, 3:09pm UTC](https://discuss.elastic.co/t/update-marvel-license-failed/38495 "2017-01-14T15:09:08Z")

</div>

I have installed a "trial" license for Marvel and the status is now "expired". I downloaded a "Basic License" and I try to install it (ElasticSearch is in v2.1.0). curl -XPUT -u admin 'http://192.168.0.4:9200/\_license'…

---

## [Error in filebeat when sending logs to kibana](https://discuss.elastic.co/t/error-in-filebeat-when-sending-logs-to-kibana/176314)

<div class="topic-metadata">

**Author:** [@huzefabootwala](https://discuss.elastic.co/u/huzefabootwala)\
**Replies:** 14\
**Last updated:** [April 16, 2019, 7:52am UTC](https://discuss.elastic.co/t/error-in-filebeat-when-sending-logs-to-kibana/176314 "2019-04-16T07:52:40Z")

</div>

Hello, I have set up Elasticsearch (6.7.1) and kibana on my local machine. Have installed Filebeat and logstash on a VM for testing and for shipping logs from VM to my local machine. Filebeat config: #===============…

---

## [Copy index](https://discuss.elastic.co/t/copy-index/20293)

<div class="topic-metadata">

**Author:** [@eunever32](https://discuss.elastic.co/u/eunever32)\
**Replies:** 19\
**Last updated:** [October 22, 2014, 1:56pm UTC](https://discuss.elastic.co/t/copy-index/20293 "2014-10-22T13:56:37Z")

</div>

Hi I can see there are lots of utilities to copy the contents of an index such as elasticdump reindexer streames etc And they mostly use scan scroll. Is there a single curl command to copy an index to a new …

---

## [Transform: Sum doesn't add up](https://discuss.elastic.co/t/transform-sum-doesnt-add-up/256622)

<div class="topic-metadata">

**Author:** [@kaijun](https://discuss.elastic.co/u/kaijun)\
**Replies:** 15\
**Last updated:** [November 25, 2020, 2:09pm UTC](https://discuss.elastic.co/t/transform-sum-doesnt-add-up/256622 "2020-11-25T14:09:20Z")

</div>

I have an existing index datalog.gl\_sep20 and I want to transform to a new index based on some fields and do a sum aggregation based on "count" field. This is how I do it: curl -X PUT "localhost:9200/\_transform/transfor…

---

## [Is Elasticsearch suitable for efficient retrieval of large number of docs?](https://discuss.elastic.co/t/is-elasticsearch-suitable-for-efficient-retrieval-of-large-number-of-docs/317845)

<div class="topic-metadata">

**Author:** [@David\_Yu](https://discuss.elastic.co/u/David_Yu)\
**Replies:** 14\
**Last updated:** [November 1, 2022, 4:13pm UTC](https://discuss.elastic.co/t/is-elasticsearch-suitable-for-efficient-retrieval-of-large-number-of-docs/317845 "2022-11-01T16:13:17Z")

</div>

How do we use ES? Our team is using ES to index ads metadata. When we need to show a user ads, we query ES for a list of ads that satisfy certain criteria (e.g. geo, queries, campaign date range, etc). Upon fetching the…

---

## [Assigning @timeout from JSON log4j2 logs via Filebeat](https://discuss.elastic.co/t/assigning-timeout-from-json-log4j2-logs-via-filebeat/88501)

<div class="topic-metadata">

**Author:** [@Brian\_Topping](https://discuss.elastic.co/u/Brian_Topping)\
**Replies:** 11\
**Last updated:** [June 7, 2017, 8:22am UTC](https://discuss.elastic.co/t/assigning-timeout-from-json-log4j2-logs-via-filebeat/88501 "2017-06-07T08:22:21Z")

</div>

Hi all, I'm looking to use log4j2 JSONLayout to generate log entries to be read by Filebeat. Everything works so far, but the timestamp on the log entries in the Kibana UI is set to when Filebeat read the logs, not when …

---

## [No handler for type \[attachment\] declared on field \[my\_attachment\]](https://discuss.elastic.co/t/no-handler-for-type-attachment-declared-on-field-my-attachment/139441)

<div class="topic-metadata">

**Author:** [@Suleyman\_Yalman](https://discuss.elastic.co/u/Suleyman_Yalman)\
**Replies:** 13\
**Last updated:** [July 22, 2018, 9:24pm UTC](https://discuss.elastic.co/t/no-handler-for-type-attachment-declared-on-field-my-attachment/139441 "2018-07-22T21:24:32Z")

</div>

Hi to all. when l run this in postman : { "person" : { "properties" : { "my\_attachment" : { "type" : "attachment" } } } } l got this respond : { "error": { "root\_cause": \[ { "type": "mapper\_parsing\_exceptio…

---

## [Elasticsearch Bulk API problems](https://discuss.elastic.co/t/elasticsearch-bulk-api-problems/227068)

<div class="topic-metadata">

**Author:** [@zebulyon](https://discuss.elastic.co/u/zebulyon)\
**Replies:** 10\
**Last updated:** [April 9, 2020, 5:48am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-api-problems/227068 "2020-04-09T05:48:24Z")

</div>

Hello, I'm in the possession of some JSON files that i would like to send to Elasticsearch so that they can be viewed in Kibana. To do this I'm using a cUrl commando as found here in the Bulk API: https://www.elastic.…

---

## [Filter on not\_analyzed field with whitespace/hyphen not working](https://discuss.elastic.co/t/filter-on-not-analyzed-field-with-whitespace-hyphen-not-working/8662)

<div class="topic-metadata">

**Author:** [@bashir](https://discuss.elastic.co/u/bashir)\
**Replies:** 10\
**Last updated:** [August 9, 2012, 5:05am UTC](https://discuss.elastic.co/t/filter-on-not-analyzed-field-with-whitespace-hyphen-not-working/8662 "2012-08-09T05:05:53Z")

</div>

I've been scratching my head for some time on this one. Major brownie points for any guidance: I have mapping: mapping :show =\> { :properties =\> {... :tags =\> {:type =\> 'string', :index\_name =\> 'tag', :boost =\> …

---

## [Kibana display zero shards in Monitoring nodes tab](https://discuss.elastic.co/t/kibana-display-zero-shards-in-monitoring-nodes-tab/195129)

<div class="topic-metadata">

**Author:** [@worapojc](https://discuss.elastic.co/u/worapojc)\
**Replies:** 15\
**Last updated:** [August 30, 2019, 4:53am UTC](https://discuss.elastic.co/t/kibana-display-zero-shards-in-monitoring-nodes-tab/195129 "2019-08-30T04:53:00Z")

</div>

Hi Elastic team, I'm using Elastic Stack 7.2.0. Kibana displays zero shards for each node in the monitoring tab. But it can display total shards correctly. What is the problem?

---

## [Can't use two ports and 2 types logs using beats](https://discuss.elastic.co/t/cant-use-two-ports-and-2-types-logs-using-beats/109136)

<div class="topic-metadata">

**Author:** [@arye](https://discuss.elastic.co/u/arye)\
**Replies:** 9\
**Last updated:** [December 4, 2017, 1:28pm UTC](https://discuss.elastic.co/t/cant-use-two-ports-and-2-types-logs-using-beats/109136 "2017-12-04T13:28:10Z")

</div>

Hi All, I have configured two conf files using the followings: input { beats { port =\> 5044 type =\> "logbeat\_general" } } input { beats { port =\> 5045 type =\> "openlogtst" } } And configured the output conf…

---

## [Need to gather the host logs , filebeat running as a container](https://discuss.elastic.co/t/need-to-gather-the-host-logs-filebeat-running-as-a-container/284000)

<div class="topic-metadata">

**Author:** [@mohammed.sabil](https://discuss.elastic.co/u/mohammed.sabil)\
**Replies:** 12\
**Last updated:** [September 22, 2021, 10:44am UTC](https://discuss.elastic.co/t/need-to-gather-the-host-logs-filebeat-running-as-a-container/284000 "2021-09-22T10:44:40Z")

</div>

Hello Team, I am new to ELK and Filebeat. I have ELK stack running on one server using docker-compose. I have Filebeat running on another server as docker container 7.14.1. I have configured filebeat-docker.yml and I…

---

## [Problem with Elastic APM](https://discuss.elastic.co/t/problem-with-elastic-apm/266277)

<div class="topic-metadata">

**Author:** [@Luis\_Garavatti](https://discuss.elastic.co/u/Luis_Garavatti)\
**Replies:** 28\
**Last updated:** [March 11, 2021, 1:23pm UTC](https://discuss.elastic.co/t/problem-with-elastic-apm/266277 "2021-03-11T13:23:34Z")

</div>

Hi Guys! We have a problem with our Elastic APM, since yesterday we have not been able to view the data I looked at the logs of the apm server and did not find any problems, but if I search in the other day (the last m…

---

## [Multiple configuration file with enabled option](https://discuss.elastic.co/t/multiple-configuration-file-with-enabled-option/155899)

<div class="topic-metadata">

**Author:** [@z.fekete](https://discuss.elastic.co/u/z.fekete)\
**Replies:** 10\
**Last updated:** [November 20, 2018, 1:10pm UTC](https://discuss.elastic.co/t/multiple-configuration-file-with-enabled-option/155899 "2018-11-20T13:10:06Z")

</div>

I have the following configuration file /etc/filebeat/filebeat.yml: filebeat.config.prospectors: path: /etc/filebeat/conf.d/\*.yml output.logstash: hosts: \["host"\] In each yml file in the folder /etc/filebeat/c…

---

## [Import new search to kibana via command line](https://discuss.elastic.co/t/import-new-search-to-kibana-via-command-line/82028)

<div class="topic-metadata">

**Author:** [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Replies:** 10\
**Last updated:** [April 12, 2017, 6:23pm UTC](https://discuss.elastic.co/t/import-new-search-to-kibana-via-command-line/82028 "2017-04-12T18:23:09Z")

</div>

Hello, I am trying to import new search to elasticsearch .kibana index. Any idea how can I achieve that? Regards, Peter

---

## [Scripted Field Error](https://discuss.elastic.co/t/scripted-field-error/155433)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 10\
**Last updated:** [November 5, 2018, 8:40pm UTC](https://discuss.elastic.co/t/scripted-field-error/155433 "2018-11-05T20:40:48Z")

</div>

I'm attempted to create a scripted field that grabs the value of a field, strips off text that matches the regex, and then puts the modified value in a new field. I am using a modified example from the documentation bec…

---

## [edgeNGram minimum length omits shorter words](https://discuss.elastic.co/t/edgengram-minimum-length-omits-shorter-words/9350)

<div class="topic-metadata">

**Author:** [@fmpwizard](https://discuss.elastic.co/u/fmpwizard)\
**Replies:** 11\
**Last updated:** [October 20, 2012, 4:04am UTC](https://discuss.elastic.co/t/edgengram-minimum-length-omits-shorter-words/9350 "2012-10-20T04:04:59Z")

</div>

Hi, I have a text field like this: 8X DVD Drive (and about 300k entries to index), so I started using a filter like this: "edgeNgram\_descr" : { "type" : "edgeNGram", "min\_gram" : 3, …

---

## [Logstash fails to load](https://discuss.elastic.co/t/logstash-fails-to-load/161305)

<div class="topic-metadata">

**Author:** [@geriberi](https://discuss.elastic.co/u/geriberi)\
**Replies:** 14\
**Last updated:** [December 27, 2018, 11:34am UTC](https://discuss.elastic.co/t/logstash-fails-to-load/161305 "2018-12-27T11:34:08Z")

</div>

Hi, i just tried to set up ELK on my win10 64 bit: java version "1.8.0\_191" Java(TM) SE Runtime Environment (build 1.8.0\_191-b12) Java HotSpot(TM) 64-Bit Server VM (build 25.191-b12, mixed mode) The packages for Ela…

---

## [Read just the new logs, and stop generation syslog automaticly](https://discuss.elastic.co/t/read-just-the-new-logs-and-stop-generation-syslog-automaticly/2773)

<div class="topic-metadata">

**Author:** [@oussama](https://discuss.elastic.co/u/oussama)\
**Replies:** 12\
**Last updated:** [June 29, 2015, 6:46am UTC](https://discuss.elastic.co/t/read-just-the-new-logs-and-stop-generation-syslog-automaticly/2773 "2015-06-29T06:46:55Z")

</div>

Hi, i am using the last versions of logstash, kibana and elasticsearch In fact i have two problem, and i hope that you can help me the first problem is that if i add an other log in access.log, the logstash re…

---

## [Secure filebeat to logstash](https://discuss.elastic.co/t/secure-filebeat-to-logstash/242899)

<div class="topic-metadata">

**Author:** [@elk6](https://discuss.elastic.co/u/elk6)\
**Replies:** 21\
**Last updated:** [July 30, 2020, 3:06pm UTC](https://discuss.elastic.co/t/secure-filebeat-to-logstash/242899 "2020-07-30T15:06:31Z")

</div>

I was tasked to secure the whole elastic flow and was able to secure the logstash-elasticsearch-kibana flow. I'm now having some trouble encrypting filebeat to logstash (It's the last step). According to the "secure fil…

---

## [How to partially delete an index](https://discuss.elastic.co/t/how-to-partially-delete-an-index/269317)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 13\
**Last updated:** [April 9, 2021, 2:16am UTC](https://discuss.elastic.co/t/how-to-partially-delete-an-index/269317 "2021-04-09T02:16:11Z")

</div>

How can I delete only the records that meet the criteria of the index registered in elasticsearch? I don't want to delete the entire index. In other words, not the following instruction. curl -XDELETE localhost:9200/i…

---

## [Trying to parse XML-logs](https://discuss.elastic.co/t/trying-to-parse-xml-logs/132749)

<div class="topic-metadata">

**Author:** [@Petersiemens](https://discuss.elastic.co/u/Petersiemens)\
**Replies:** 10\
**Last updated:** [May 28, 2018, 6:29am UTC](https://discuss.elastic.co/t/trying-to-parse-xml-logs/132749 "2018-05-28T06:29:12Z")

</div>

Hello, im currently trying to parse a XML-log. I worked with logstash the past month to parse simple single- or multiline logs, so im familiar with the functionality of input{} / filter{} / output{}. Now i want to par…

---

## [Replace @timestamp with log's time Somebody help me please](https://discuss.elastic.co/t/replace-timestamp-with-logs-time-somebody-help-me-please/187705)

<div class="topic-metadata">

**Author:** [@anhdt061091](https://discuss.elastic.co/u/anhdt061091)\
**Replies:** 17\
**Last updated:** [July 2, 2019, 2:10am UTC](https://discuss.elastic.co/t/replace-timestamp-with-logs-time-somebody-help-me-please/187705 "2019-07-02T02:10:33Z")

</div>

Hi everyone I used logstash and elasticsearch 6.5 and i want to replace @timestamp to log's time but failed, i don't undertand where i'm wrong . My log format : 2019-06-27 08:55:22 INFO 43665 SMS-MT \[cid:nnx\_smppg…

---

## [HIgh availability of ES](https://discuss.elastic.co/t/high-availability-of-es/155975)

<div class="topic-metadata">

**Author:** [@Yogesh\_BG](https://discuss.elastic.co/u/Yogesh_BG)\
**Replies:** 28\
**Last updated:** [November 21, 2018, 2:54pm UTC](https://discuss.elastic.co/t/high-availability-of-es/155975 "2018-11-21T14:54:17Z")

</div>

Hi I am using 6 node ES cluster of 3 masters and 3 data nodes. one master and one data node in each vm of the machine. Totally 3 machines. replication factor = 3. num of shards = 3. node left delay being set to 5m. W…

---

## [Does slack action require that we add certs to keystore?](https://discuss.elastic.co/t/does-slack-action-require-that-we-add-certs-to-keystore/114056)

<div class="topic-metadata">

**Author:** [@Souciance\_Eqdam\_Rash](https://discuss.elastic.co/u/Souciance_Eqdam_Rash)\
**Replies:** 12\
**Last updated:** [January 8, 2018, 10:04pm UTC](https://discuss.elastic.co/t/does-slack-action-require-that-we-add-certs-to-keystore/114056 "2018-01-08T22:04:02Z")

</div>

Hello, I am trying to add a slack action to my watcher (using ES/Kibana 6.1.1). I am getting the error: \[2018-01-04T11:11:02,859\]\[ERROR\]\[o.e.x.n.s.SlackService \] \[SELULT4729\] failed to execute slack api http request …

---

## [ElasticSearch 2.3.5 and Bitbucket failes to start](https://discuss.elastic.co/t/elasticsearch-2-3-5-and-bitbucket-failes-to-start/104283)

<div class="topic-metadata">

**Author:** [@Kris\_Boultbee](https://discuss.elastic.co/u/Kris_Boultbee)\
**Replies:** 11\
**Last updated:** [November 2, 2017, 8:17pm UTC](https://discuss.elastic.co/t/elasticsearch-2-3-5-and-bitbucket-failes-to-start/104283 "2017-11-02T20:17:34Z")

</div>

I'm attempting to configure Elasticsearch 2.3.5 to work with our Bitbucket Sever install. I'm using this older version because it is the newest version supported by Bitbucket Server. However, trying to configure Elastics…

---

## [Has\_child query performance](https://discuss.elastic.co/t/has-child-query-performance/56523)

<div class="topic-metadata">

**Author:** [@jwg2s](https://discuss.elastic.co/u/jwg2s)\
**Replies:** 13\
**Last updated:** [March 30, 2017, 10:16pm UTC](https://discuss.elastic.co/t/has-child-query-performance/56523 "2017-03-30T22:16:36Z")

</div>

Hi, We just rolled out a new portion of our product that allows for searching by child documents. The response times on these queries are significantly lower than if only querying fields on the parent document. I wa…

---

## [Encoding charset logstash accents log problem](https://discuss.elastic.co/t/encoding-charset-logstash-accents-log-problem/133087)

<div class="topic-metadata">

**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\
**Replies:** 10\
**Last updated:** [May 28, 2018, 8:42am UTC](https://discuss.elastic.co/t/encoding-charset-logstash-accents-log-problem/133087 "2018-05-28T08:42:49Z")

</div>

Hello ELK community :slight\_smile: I've got a problem, I listen a "Vega" log file thanks toFilebeat and then I transfer these logs into Logstash to grok them etc... For exemple, a log line in my log file looks like : …

---

## [Configuration ElasticaBundle Analyzer](https://discuss.elastic.co/t/configuration-elasticabundle-analyzer/76809)

<div class="topic-metadata">

**Author:** [@Kiki](https://discuss.elastic.co/u/Kiki)\
**Replies:** 10\
**Last updated:** [March 1, 2017, 2:40pm UTC](https://discuss.elastic.co/t/configuration-elasticabundle-analyzer/76809 "2017-03-01T14:40:09Z")

</div>

Bonjour, J'essaie, tant bien que mal, de configurer mon analyzer pour ElasticSearch avec ElastiaBundle. Mais j'ai l'impression que celui-ci n'est pas pris en compte. Voici la configuration : fos\_elastica: …

---

## [Help in Data collection and indexing](https://discuss.elastic.co/t/help-in-data-collection-and-indexing/130802)

<div class="topic-metadata">

**Author:** [@thompsonlau](https://discuss.elastic.co/u/thompsonlau)\
**Replies:** 25\
**Last updated:** [May 17, 2018, 11:36am UTC](https://discuss.elastic.co/t/help-in-data-collection-and-indexing/130802 "2018-05-17T11:36:40Z")

</div>

I have already finished installation and configuration of Elastic, Kibana and Logstash. I found some existing indices after browsing to localhost:9200/\_cat/indices?v Now I want to send logs from different devices via J…

---

## [Filebeat not polling the directory](https://discuss.elastic.co/t/filebeat-not-polling-the-directory/51472)

<div class="topic-metadata">

**Author:** [@kalapakim](https://discuss.elastic.co/u/kalapakim)\
**Replies:** 10\
**Last updated:** [June 16, 2016, 10:28am UTC](https://discuss.elastic.co/t/filebeat-not-polling-the-directory/51472 "2016-06-16T10:28:27Z")

</div>

if I run the command: filebeat.exe -c filebeat.yml -e then any logs that are dropped into the directory I specify will be harvested and sent to kafka, as expected. But I do not want a command window up and running.…

---

## [Calculate time difference in scripted field](https://discuss.elastic.co/t/calculate-time-difference-in-scripted-field/271213)

<div class="topic-metadata">

**Author:** [@mangeshmj1992](https://discuss.elastic.co/u/mangeshmj1992)\
**Replies:** 18\
**Last updated:** [April 26, 2021, 2:22pm UTC](https://discuss.elastic.co/t/calculate-time-difference-in-scripted-field/271213 "2021-04-26T14:22:57Z")

</div>

The question is how to get the difference from following date format in a second? For example, if date1 = 4/21/2021 7:53:50 and date2 = 6/21/2021 7:54:10, the answer should 20 . I am trying below code but it is providi…

---

## [Elasticsearch .NET 7.1.0 issue](https://discuss.elastic.co/t/elasticsearch-net-7-1-0-issue/193674)

<div class="topic-metadata">

**Author:** [@roman.pavliuk](https://discuss.elastic.co/u/roman.pavliuk)\
**Replies:** 9\
**Last updated:** [August 5, 2019, 7:11am UTC](https://discuss.elastic.co/t/elasticsearch-net-7-1-0-issue/193674 "2019-08-05T07:11:30Z")

</div>

I have updated my project into last elasticsearch version. But after this, when I trying to get data from my elastic, I have next exception. My nugets: Elasticsearch.Net v7.1.0, NEST 7.1.0 Before update, when I using 6.7…

---

## [Query Template not working](https://discuss.elastic.co/t/query-template-not-working/28948)

<div class="topic-metadata">

**Author:** [@vilas](https://discuss.elastic.co/u/vilas)\
**Replies:** 12\
**Last updated:** [November 19, 2015, 10:51am UTC](https://discuss.elastic.co/t/query-template-not-working/28948 "2015-11-19T10:51:04Z")

</div>

Hi, I have created a query template, which involves multiple aggregations with default fields as below: { "template" : { "size": 0, "aggs": { "range": { "date\_range": { …

---

## [ERROR instance/beat.go:1027 Exiting: 1 error: error loading config file: invalid config: yaml: line 85: did not find expected key Exiting: 1 error: error loading config file: invalid config: yaml: line 85: did not find expected key](https://discuss.elastic.co/t/error-instance-beat-go-1027-exiting-1-error-error-loading-config-file-invalid-config-yaml-line-85-did-not-find-expected-key-exiting-1-error-error-loading-config-file-invalid-config-yaml-line-85-did-not-find-expected-key/335171)

<div class="topic-metadata">

**Author:** [@yash2](https://discuss.elastic.co/u/yash2)\
**Replies:** 27\
**Last updated:** [June 26, 2023, 8:02pm UTC](https://discuss.elastic.co/t/error-instance-beat-go-1027-exiting-1-error-error-loading-config-file-invalid-config-yaml-line-85-did-not-find-expected-key-exiting-1-error-error-loading-config-file-invalid-config-yaml-line-85-did-not-find-expected-key/335171 "2023-06-26T20:02:08Z")

</div>

I have configured my filebeat.yml as follows : ###################### Filebeat Configuration Example ######################### # This file is an example configuration file highlighting only the most common # options. T…

---

## [Unable to get property '\_\_data\_\_' of undefined or null reference (http://xxxxxxxxx.xxx.com:5601/bundles/kibana.bundle.js?v=15443:111)](https://discuss.elastic.co/t/unable-to-get-property-data-of-undefined-or-null-reference-http-xxxxxxxxx-xxx-com-5601-bundles-kibana-bundle-js-v-15443-111/98592)

<div class="topic-metadata">

**Author:** [@aswinkumart](https://discuss.elastic.co/u/aswinkumart)\
**Replies:** 9\
**Last updated:** [October 11, 2017, 11:23am UTC](https://discuss.elastic.co/t/unable-to-get-property-data-of-undefined-or-null-reference-http-xxxxxxxxx-xxx-com-5601-bundles-kibana-bundle-js-v-15443-111/98592 "2017-10-11T11:23:37Z")

</div>

I am able to start all the below services and forward the logs from Filebeat-\>Logstash-\>Elasticsearch I could see the logs are loading in Kibana, however, when I try to mouse hover the vertical bars in the attached kiba…

---

## [Index Management Tab is not visible](https://discuss.elastic.co/t/index-management-tab-is-not-visible/223787)

<div class="topic-metadata">

**Author:** [@somebody](https://discuss.elastic.co/u/somebody)\
**Replies:** 12\
**Last updated:** [March 18, 2020, 5:09pm UTC](https://discuss.elastic.co/t/index-management-tab-is-not-visible/223787 "2020-03-18T17:09:29Z")

</div>

Hi, I have installed Kibana and ES ( 7.5.1 both) basic version. I need to test Index Management feature present in Basic Version of ES-Kibana. (https://www.elastic.co/guide/en/kibana/current/managing-indices.html) Howe…

---

## [Delete the old data from index](https://discuss.elastic.co/t/delete-the-old-data-from-index/156312)

<div class="topic-metadata">

**Author:** [@Ganesh2303](https://discuss.elastic.co/u/Ganesh2303)\
**Replies:** 23\
**Last updated:** [November 28, 2018, 2:03pm UTC](https://discuss.elastic.co/t/delete-the-old-data-from-index/156312 "2018-11-28T14:03:10Z")

</div>

HI, I want to delete data from ES index and i want to keep only last 30 days record in it. Is it possible to achieve this with rollover concept.

---

## [App Search indices not accessible through Kibana?](https://discuss.elastic.co/t/app-search-indices-not-accessible-through-kibana/262435)

<div class="topic-metadata">

**Author:** [@sabetali](https://discuss.elastic.co/u/sabetali)\
**Replies:** 10\
**Last updated:** [January 30, 2021, 4:27am UTC](https://discuss.elastic.co/t/app-search-indices-not-accessible-through-kibana/262435 "2021-01-30T04:27:28Z")

</div>

When I navigate to Index Management on the Kibana console, my App Search indices don't show up. Why is this the case? Can I create an index through my elasticsearch endpoint and have it be accessible through my App Searc…

---

## [How to re-ingest logs after upgrade to Elastic Stack 6.3.0](https://discuss.elastic.co/t/how-to-re-ingest-logs-after-upgrade-to-elastic-stack-6-3-0/140743)

<div class="topic-metadata">

**Author:** [@Reena\_Deberry](https://discuss.elastic.co/u/Reena_Deberry)\
**Replies:** 22\
**Last updated:** [August 1, 2018, 9:17pm UTC](https://discuss.elastic.co/t/how-to-re-ingest-logs-after-upgrade-to-elastic-stack-6-3-0/140743 "2018-08-01T21:17:50Z")

</div>

I've re-installed the ELK stack from scratch on a server that previously had a lower version. I though i had it all cleaned up prior to installing the latest version of ELK. When i go to the Kibana console i am not seein…

[Previous page](https://discuss.elastic.co/top.md?page=94&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=96&per_page=50&period=all)
