# Top **URL:** https://discuss.elastic.co/top.md?page=958&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 959 --- ## [@timestamp should match with aupm\_timestamp is not working for me](https://discuss.elastic.co/t/timestamp-should-match-with-aupm-timestamp-is-not-working-for-me/47311)
**Author:** [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)\ **Replies:** 8\ **Last updated:** [April 14, 2016, 11:02pm UTC](https://discuss.elastic.co/t/timestamp-should-match-with-aupm-timestamp-is-not-working-for-me/47311 "2016-04-14T23:02:03Z")
error --- ## [Field names with the same name across types having different index/type in Elasticsearch](https://discuss.elastic.co/t/field-names-with-the-same-name-across-types-having-different-index-type-in-elasticsearch/22663)
**Author:** [@shahshi15](https://discuss.elastic.co/u/shahshi15)\ **Replies:** 3\ **Last updated:** [March 14, 2015, 7:30pm UTC](https://discuss.elastic.co/t/field-names-with-the-same-name-across-types-having-different-index-type-in-elasticsearch/22663 "2015-03-14T19:30:32Z")
I have detailed my question on stackoverflow here: http://stackoverflow.com/questions/29041509/field-names-with-the-same-name-across-types-having-different-index-type-in-elast Briefing it here as well : I have b… --- ## [How to change routing value for existed routed data?](https://discuss.elastic.co/t/how-to-change-routing-value-for-existed-routed-data/280689)
**Author:** [@judy\_gao](https://discuss.elastic.co/u/judy_gao)\ **Replies:** 4\ **Last updated:** [August 31, 2021, 8:00pm UTC](https://discuss.elastic.co/t/how-to-change-routing-value-for-existed-routed-data/280689 "2021-08-31T20:00:56Z")
I have an existed index which is "\_routing" required as true. So all data is already routed to particular shards based on "\_routing" value. Right now we're using a customized routing value like "organization id" to route… --- ## [Removing failed ECE deployments in Cloud UI](https://discuss.elastic.co/t/removing-failed-ece-deployments-in-cloud-ui/192931)
**Author:** [@Ryan\_Downey](https://discuss.elastic.co/u/Ryan_Downey)\ **Replies:** 4\ **Last updated:** [July 30, 2019, 6:27pm UTC](https://discuss.elastic.co/t/removing-failed-ece-deployments-in-cloud-ui/192931 "2019-07-30T18:27:36Z")
ECE 2.2 Issue: I have two deployments showing in the Cloud UI that are stuck in the "Deployment Not Found" stage and I'm trying to clarify how to clear them out correctly. From what I understand of the post linked belo… --- ## [Kibana tile map showing no result found](https://discuss.elastic.co/t/kibana-tile-map-showing-no-result-found/54405)
**Author:** [@shriram\_bharath](https://discuss.elastic.co/u/shriram_bharath)\ **Replies:** 4\ **Last updated:** [July 8, 2016, 9:24am UTC](https://discuss.elastic.co/t/kibana-tile-map-showing-no-result-found/54405 "2016-07-08T09:24:50Z")
Kindly help me with the issue : Described here : http://stackoverflow.com/q/38120913/5076706 --- ## [APM server not connecting to ElasticSearch](https://discuss.elastic.co/t/apm-server-not-connecting-to-elasticsearch/168508)
**Author:** [@tm8747a](https://discuss.elastic.co/u/tm8747a)\ **Replies:** 2\ **Last updated:** [February 15, 2019, 3:51pm UTC](https://discuss.elastic.co/t/apm-server-not-connecting-to-elasticsearch/168508 "2019-02-15T15:51:47Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 6.6… --- ## [LogStash Imports Numbers as Strings into Elastic](https://discuss.elastic.co/t/logstash-imports-numbers-as-strings-into-elastic/47126)
**Author:** [@wstrater](https://discuss.elastic.co/u/wstrater)\ **Replies:** 2\ **Last updated:** [April 21, 2016, 9:14pm UTC](https://discuss.elastic.co/t/logstash-imports-numbers-as-strings-into-elastic/47126 "2016-04-21T21:14:20Z")
I am struggling with importing fields into Elastic with the correct format. I am getting numbers stored as string and strings stored as IP addresses and wonder if it is my template. I eventually gave up in getting IP add… --- ## [Issue in Bulk indexing with Elasticsearch Python Client](https://discuss.elastic.co/t/issue-in-bulk-indexing-with-elasticsearch-python-client/24657)
**Author:** [@d\_bharvi](https://discuss.elastic.co/u/d_bharvi)\ **Replies:** 2\ **Last updated:** [July 1, 2015, 11:29am UTC](https://discuss.elastic.co/t/issue-in-bulk-indexing-with-elasticsearch-python-client/24657 "2015-07-01T11:29:18Z")
Hi, I am continously getting exception while doing bulk index. Number of documents are 800 only. Even trying a timeout of 300 does not help. After insertion of around 400 docs below errors grt raised. This exception ha… --- ## [Elasticsearch bulk rejection error in logstash logs](https://discuss.elastic.co/t/elasticsearch-bulk-rejection-error-in-logstash-logs/249397)
**Author:** [@Kartikey\_Bhatore](https://discuss.elastic.co/u/Kartikey_Bhatore)\ **Replies:** 5\ **Last updated:** [October 22, 2020, 11:58am UTC](https://discuss.elastic.co/t/elasticsearch-bulk-rejection-error-in-logstash-logs/249397 "2020-10-22T11:58:43Z")
Hello, I am using ELK stack v6.5.3. I have a 7 node cluster (5 datanodes \[elasticsearch + logstash \] and 2 coordinator nodes \[elasticsearch + kibana\]) from past some days I am getting below error on one of my logst… --- ## [Frozen Index/Node questions](https://discuss.elastic.co/t/frozen-index-node-questions/239435)
**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\ **Replies:** 5\ **Last updated:** [July 1, 2020, 9:17am UTC](https://discuss.elastic.co/t/frozen-index-node-questions/239435 "2020-07-01T09:17:36Z")
Hi, I have some questions regarding frozen indices. Is there a possibility to declare a node as a "frozen node"? I have a cluster with 3 nodes and I am wondering if I could ad a node which takes all the indices that… --- ## [How to trace non web transactions](https://discuss.elastic.co/t/how-to-trace-non-web-transactions/207052)
**Author:** [@SheetalRIL](https://discuss.elastic.co/u/SheetalRIL)\ **Replies:** 5\ **Last updated:** [November 12, 2019, 11:25am UTC](https://discuss.elastic.co/t/how-to-trace-non-web-transactions/207052 "2019-11-12T11:25:08Z")
Hi We are using ELK 6.8.4 and APM 6.8.1. We are able to monitor API based applications using APM but we have a requirement of monitoring Non-API applications (batch jobs) using APM. We couldnt find any way to do it. C… --- ## [Configure logstash for dev and prod with different index pattern](https://discuss.elastic.co/t/configure-logstash-for-dev-and-prod-with-different-index-pattern/165853)
**Author:** [@sundarm](https://discuss.elastic.co/u/sundarm)\ **Replies:** 5\ **Last updated:** [January 30, 2019, 11:31am UTC](https://discuss.elastic.co/t/configure-logstash-for-dev-and-prod-with-different-index-pattern/165853 "2019-01-30T11:31:08Z")
Hi , I am having single logstash server and installed filebeats on dev and prod instances and in my logstash config i am using the following index pattern index =\> "applogs-%{+YYYY.MM.dd}" so now all my dev and prod … --- ## [Type Geo\_Point](https://discuss.elastic.co/t/type-geo-point/88239)
**Author:** [@1623664](https://discuss.elastic.co/u/1623664)\ **Replies:** 5\ **Last updated:** [June 5, 2017, 12:33pm UTC](https://discuss.elastic.co/t/type-geo-point/88239 "2017-06-05T12:33:14Z")
input { jdbc { jdbc\_driver\_library =\> "/home/cuckoo/cuckoo/logstash-5.2.2/mariadb-java-client-1.5.9.jar" jdbc\_driver\_class =\> "org.mariadb.jdbc.Driver" jdbc\_connection\_string =\> "jdbc:mariadb://100.1100.100.100:3306… --- ## [Bar Chart X-Axis Text Alignment](https://discuss.elastic.co/t/bar-chart-x-axis-text-alignment/260667)
**Author:** [@nameisnotimportant](https://discuss.elastic.co/u/nameisnotimportant)\ **Replies:** 3\ **Last updated:** [January 13, 2021, 9:44am UTC](https://discuss.elastic.co/t/bar-chart-x-axis-text-alignment/260667 "2021-01-13T09:44:54Z")
Hi, How do i set the text alignment on the X-Axis to vertical ? This bar chart created using Date Histogram where minimum interval = Day. I further aggregate the data using Split series and my Sub aggregation type is '… --- ## [Dell networking OS 9.8 use with Logstash](https://discuss.elastic.co/t/dell-networking-os-9-8-use-with-logstash/55435)
**Author:** [@apomerenk](https://discuss.elastic.co/u/apomerenk)\ **Replies:** 3\ **Last updated:** [July 21, 2016, 2:19pm UTC](https://discuss.elastic.co/t/dell-networking-os-9-8-use-with-logstash/55435 "2016-07-21T14:19:55Z")
We are trying to monitor a Dell Switch and send some statistics to a central Logstash Repo running on a http IP address listening on a port. However, the way that we were doing it before was with the "curl -XPUT ..." com… --- ## [JVM crashes on SunOS](https://discuss.elastic.co/t/jvm-crashes-on-sunos/7300)
**Author:** [@Danny\_Coates](https://discuss.elastic.co/u/Danny_Coates)\ **Replies:** 3\ **Last updated:** [April 16, 2012, 7:11am UTC](https://discuss.elastic.co/t/jvm-crashes-on-sunos/7300 "2012-04-16T07:11:47Z")
Hi, I'm experiencing JVM crashes while running ElasticSearch on Joyent's SmartOS (an OpenSolaris fork). I was originally using mmapfs, but switched to niofs after seeing crashes related to MMapDirectory (and re… --- ## [Kibana anomaly explorer](https://discuss.elastic.co/t/kibana-anomaly-explorer/254887)
**Author:** [@liorg2](https://discuss.elastic.co/u/liorg2)\ **Replies:** 2\ **Last updated:** [November 17, 2020, 10:56am UTC](https://discuss.elastic.co/t/kibana-anomaly-explorer/254887 "2020-11-17T10:56:16Z")
Hello, It seems that there is a bug in the ml display in Kibana ( Categorization\> rare occurrences job) you can see below red squares, but actually there aren't any major anomalies --- ## [Way to identify matching grok pattern](https://discuss.elastic.co/t/way-to-identify-matching-grok-pattern/190082)
**Author:** [@AmolB](https://discuss.elastic.co/u/AmolB)\ **Replies:** 6\ **Last updated:** [July 15, 2019, 7:52am UTC](https://discuss.elastic.co/t/way-to-identify-matching-grok-pattern/190082 "2019-07-15T07:52:26Z")
Hello Everyone, I am using Grok filter plugin for Logstash (Logstash version 6.7.1) . My log line has several formats, so I have written more than 10 grok patterns for it. Now, I am interested in understanding the grok … --- ## [Scalability issue - Rally benchmark on ES 7.0.1](https://discuss.elastic.co/t/scalability-issue-rally-benchmark-on-es-7-0-1/183424)
**Author:** [@cks](https://discuss.elastic.co/u/cks)\ **Replies:** 6\ **Last updated:** [June 4, 2019, 6:40am UTC](https://discuss.elastic.co/t/scalability-issue-rally-benchmark-on-es-7-0-1/183424 "2019-06-04T06:40:14Z")
Running Rally on existing ElasticSearch 7.0.1 cluster. Tried on three cluster sizes, 1 node cluster, 2 nodes clusters and 4 node clusters. I don't see the scalability improvement on adding nodes to cluster. Rally: es… --- ## [Parsing a lot of different syslogs using logstash](https://discuss.elastic.co/t/parsing-a-lot-of-different-syslogs-using-logstash/142324)
**Author:** [@Kateryna](https://discuss.elastic.co/u/Kateryna)\ **Replies:** 6\ **Last updated:** [July 31, 2018, 2:24pm UTC](https://discuss.elastic.co/t/parsing-a-lot-of-different-syslogs-using-logstash/142324 "2018-07-31T14:24:50Z")
Hi guys! I have to parse a lot of different syslogs. Here are a few examples: 07/31/2018:08:45:02 GMT res-nsvpx-pri 0-PPE-0 : default SSLLOG SSL\_HANDSHAKE\_SUCCESS 15132959 0 : SPCBId 483501867 - ClientIP 40.115.27.19… --- ## [ElasticSearch Java API 8.5.0 fields are missing from indexed document](https://discuss.elastic.co/t/elasticsearch-java-api-8-5-0-fields-are-missing-from-indexed-document/318576)
**Author:** [@AKDAS\_System](https://discuss.elastic.co/u/AKDAS_System)\ **Replies:** 7\ **Last updated:** [November 10, 2022, 9:34am UTC](https://discuss.elastic.co/t/elasticsearch-java-api-8-5-0-fields-are-missing-from-indexed-document/318576 "2022-11-10T09:34:26Z")
Hello. We've been migrating from ES 7 version to 8.5 and discovered this weird behavior. In Kibana I can index a test document with a null field value and it will get indexed and will be present in the index. PUT my-in… --- ## [Maps crashes Elastic Cloud Kibana Instance on GCP](https://discuss.elastic.co/t/maps-crashes-elastic-cloud-kibana-instance-on-gcp/229122)
**Author:** [@pgoldtho](https://discuss.elastic.co/u/pgoldtho)\ **Replies:** 7\ **Last updated:** [April 27, 2020, 5:31pm UTC](https://discuss.elastic.co/t/maps-crashes-elastic-cloud-kibana-instance-on-gcp/229122 "2020-04-27T17:31:26Z")
I'm evaluating Elastic Cloud for a geospatial application that maps real estate parcel data to geographic features like flood zones and wetlands. I'm using Kibana Maps to display the result. I'm using a trial account an… --- ## [Logstash's Kinesis input plugin doesn't able to access aws credentials file](https://discuss.elastic.co/t/logstashs-kinesis-input-plugin-doesnt-able-to-access-aws-credentials-file/159804)
**Author:** [@vnallamothu](https://discuss.elastic.co/u/vnallamothu)\ **Replies:** 7\ **Last updated:** [December 11, 2018, 3:50pm UTC](https://discuss.elastic.co/t/logstashs-kinesis-input-plugin-doesnt-able-to-access-aws-credentials-file/159804 "2018-12-11T15:50:22Z")
I was trying to send my logs from AWS Kinesis Firehose to my self managed Elasticsearch cluster through logstash and logstash's kinesis input plugin. My conf file looks like the following: input { kinesis { … --- ## [How to make Kibana a superuser](https://discuss.elastic.co/t/how-to-make-kibana-a-superuser/131901)
**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\ **Replies:** 1\ **Last updated:** [May 15, 2018, 3:12pm UTC](https://discuss.elastic.co/t/how-to-make-kibana-a-superuser/131901 "2018-05-15T15:12:09Z")
I installed x-pack for Kibana as well as Elasticsearch. However, I cant see data using kibana user. But I can see it using elastic user when logged in Kibana I can see kibana has kibana\_system role. How can I change th… --- ## [Cannot install x-pack in kibana 5.1.2](https://discuss.elastic.co/t/cannot-install-x-pack-in-kibana-5-1-2/73232)
**Author:** [@Guare](https://discuss.elastic.co/u/Guare)\ **Replies:** 7\ **Last updated:** [January 30, 2017, 7:41pm UTC](https://discuss.elastic.co/t/cannot-install-x-pack-in-kibana-5-1-2/73232 "2017-01-30T19:41:28Z")
Hello mates!! I want to integrate x-pack in kibana and elasticsearch. In elasticsearch installs without problems but does not happen same in kibana. I tried installing the plugin in offline and online with "kibana-plug… --- ## [Logstash if statement not working probably](https://discuss.elastic.co/t/logstash-if-statement-not-working-probably/37920)
**Author:** [@davinders](https://discuss.elastic.co/u/davinders)\ **Replies:** 1\ **Last updated:** [December 24, 2015, 11:06pm UTC](https://discuss.elastic.co/t/logstash-if-statement-not-working-probably/37920 "2015-12-24T23:06:00Z")
Continuing the discussion from Grok filter if condition issue: Continuing the discussion from Grok filter if condition issue: I am trying to restrict content/data to go to Elasticsearch if grok not able to parse data… --- ## [Logstash to Logstash Certificate Error](https://discuss.elastic.co/t/logstash-to-logstash-certificate-error/243713)
**Author:** [@Yawn](https://discuss.elastic.co/u/Yawn)\ **Replies:** 0\ **Last updated:** [August 4, 2020, 1:21pm UTC](https://discuss.elastic.co/t/logstash-to-logstash-certificate-error/243713 "2020-08-04T13:21:51Z")
Hello everyone Would really appreciate anyone's input on this.. I've been struggling with a certificate problem between 2 logstash servers. I have the following setup basically: agents \> LogstashA \> LogstashB \> Elast… --- ## [Summer of Relevance - Early Bird Tickets Available](https://discuss.elastic.co/t/summer-of-relevance-early-bird-tickets-available/182069)
**Author:** [@softwaredoug](https://discuss.elastic.co/u/softwaredoug)\ **Replies:** 0\ **Last updated:** [May 21, 2019, 5:19pm UTC](https://discuss.elastic.co/t/summer-of-relevance-early-bird-tickets-available/182069 "2019-05-21T17:19:58Z")
Hi everyone, we will be hosting "Summer of Relevance" a week of learning and exploration on search relevance. We'll have 2 days of "Think Like a Relevance Engineer" training and 2 days of "Learning to Rank" training. Go … --- ## [Search template does not work](https://discuss.elastic.co/t/search-template-does-not-work/58317)
**Author:** [@ddshou](https://discuss.elastic.co/u/ddshou)\ **Replies:** 0\ **Last updated:** [August 18, 2016, 6:10am UTC](https://discuss.elastic.co/t/search-template-does-not-work/58317 "2016-08-18T06:10:08Z")
Hello All, I am trying to use search template with REST endpoint : GET /\_search/template,and it does work. for instance: { "inline": { "query": { "match": { "title": "{{query\_strin… --- ## [Beats (Windows Installer) 8.18.6, 8.19.3, 9.0.6, & 9.1.0 Security Update (ESA-2025-12)](https://discuss.elastic.co/t/beats-windows-installer-8-18-6-8-19-3-9-0-6-9-1-0-security-update-esa-2025-12/380558)
**Author:** [@Bryan\_Garcia](https://discuss.elastic.co/u/Bryan_Garcia)\ **Replies:** 0\ **Last updated:** [July 29, 2025, 11:32pm UTC](https://discuss.elastic.co/t/beats-windows-installer-8-18-6-8-19-3-9-0-6-9-1-0-security-update-esa-2025-12/380558 "2025-07-29T23:32:46Z")
Beats Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the Windows Installer (ESA-2025-12) An uncontrolled search path element vulnerability can lead to local privilege Escalation … --- ## [Kibana 8.16.4 and 8.17.2 Security Update (ESA-2025-02)](https://discuss.elastic.co/t/kibana-8-16-4-and-8-17-2-security-update-esa-2025-02/376918)
**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\ **Replies:** 0\ **Last updated:** [April 8, 2025, 3:53pm UTC](https://discuss.elastic.co/t/kibana-8-16-4-and-8-17-2-security-update-esa-2025-02/376918 "2025-04-08T15:53:15Z")
Kibana Prototype Pollution can lead to code injection (ESA-2025-02) Prototype Pollution in Kibana can lead to code injection via unrestricted file upload combined with path traversal. Affected Versions: Kibana version… --- ## [Grokparsefailure output error](https://discuss.elastic.co/t/grokparsefailure-output-error/209350)
**Author:** [@Barushka](https://discuss.elastic.co/u/Barushka)\ **Replies:** 8\ **Last updated:** [December 18, 2019, 6:26pm UTC](https://discuss.elastic.co/t/grokparsefailure-output-error/209350 "2019-12-18T18:26:12Z")
My logstash shuts down because of this error: \[2019-11-25T10:53:06,400\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:main, :exception=\>"LogStash::Conf… --- ## [Pre-fetch min and max price field for filtering a query](https://discuss.elastic.co/t/pre-fetch-min-and-max-price-field-for-filtering-a-query/169370)
**Author:** [@itsliamjones](https://discuss.elastic.co/u/itsliamjones)\ **Replies:** 2\ **Last updated:** [February 21, 2019, 4:31pm UTC](https://discuss.elastic.co/t/pre-fetch-min-and-max-price-field-for-filtering-a-query/169370 "2019-02-21T16:31:01Z")
Hi, I'm looking at adding mix-max price sliders to our search instance and need to find out the mix and max price available for the initial query. In Elasticsearch I have the min, max, and stat aggregations that allow … --- ## [Elasticsearch clustering and storage issues](https://discuss.elastic.co/t/elasticsearch-clustering-and-storage-issues/226216)
**Author:** [@snambu5878](https://discuss.elastic.co/u/snambu5878)\ **Replies:** 4\ **Last updated:** [April 2, 2020, 6:17pm UTC](https://discuss.elastic.co/t/elasticsearch-clustering-and-storage-issues/226216 "2020-04-02T18:17:23Z")
Hi Everyone, We are doing a POC to analyse and visualize 64 million records (175 colomns) of data on a 3 node cluster. Below are the settings: Each node capacity: CPU: 10 cores; RAM: 64Gig; Storage: 150GB I am using l… --- ## [Discrepancy in results between results in Discover and Visualization](https://discuss.elastic.co/t/discrepancy-in-results-between-results-in-discover-and-visualization/154159)
**Author:** [@chrisgr](https://discuss.elastic.co/u/chrisgr)\ **Replies:** 4\ **Last updated:** [October 29, 2018, 2:50pm UTC](https://discuss.elastic.co/t/discrepancy-in-results-between-results-in-discover-and-visualization/154159 "2018-10-29T14:50:42Z")
Hi, We are using Kibana version 5.6.12 and since 2 weeks ago I am noticing that the results shown in a Data Table Visualization are much less than the results returned in the Discover for the same query. We are using t… --- ## [Geo\_point & index\_templates not working](https://discuss.elastic.co/t/geo-point-index-templates-not-working/100742)
**Author:** [@cptnclvn](https://discuss.elastic.co/u/cptnclvn)\ **Replies:** 4\ **Last updated:** [September 18, 2017, 5:19pm UTC](https://discuss.elastic.co/t/geo-point-index-templates-not-working/100742 "2017-09-18T17:19:39Z")
I have been trying to get the GeoIP working for visualization of my firewall logs and I can't get the geo\_point type to stick. I have read through this article and took some information from it. I have an index template … --- ## [How to fetch all data from multiple index in single query through spring boot](https://discuss.elastic.co/t/how-to-fetch-all-data-from-multiple-index-in-single-query-through-spring-boot/196897)
**Author:** [@vishallodha84](https://discuss.elastic.co/u/vishallodha84)\ **Replies:** 3\ **Last updated:** [August 27, 2019, 11:52am UTC](https://discuss.elastic.co/t/how-to-fetch-all-data-from-multiple-index-in-single-query-through-spring-boot/196897 "2019-08-27T11:52:45Z")
Hi All, I have multiple indexes like store, sku, listing i want to search content in single query if any data match then get the response. I tried to check simple output from 2 indexes but its not showing simple query … --- ## [Very slow response in cluster](https://discuss.elastic.co/t/very-slow-response-in-cluster/100291)
**Author:** [@Amin1](https://discuss.elastic.co/u/Amin1)\ **Replies:** 3\ **Last updated:** [September 13, 2017, 8:21am UTC](https://discuss.elastic.co/t/very-slow-response-in-cluster/100291 "2017-09-13T08:21:45Z")
Hi team I have 7 node as follow : 172.24.69.14 22 47 0 0.03 0.02 0.05 - - es-client-02 172.24.69.18 84 98 20 0.45 0.60 0.71 d - es-data-03 172.24.69.13 15 41 0 0.00 0.01 0.05 - - es-client-01 172.24.69.17 … --- ## [Case insensitive regex match with custom grok pattern](https://discuss.elastic.co/t/case-insensitive-regex-match-with-custom-grok-pattern/154280)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 1\ **Last updated:** [November 14, 2018, 4:12pm UTC](https://discuss.elastic.co/t/case-insensitive-regex-match-with-custom-grok-pattern/154280 "2018-11-14T16:12:06Z")
Hi! I have a log with several fields. From those, I have one quoted string which needs to be matched against a regular expression pattern (case insensitive) and depending on the result I need to add a new field while ke… --- ## [Exact Match Query on analyzed field](https://discuss.elastic.co/t/exact-match-query-on-analyzed-field/1440)
**Author:** [@ananth](https://discuss.elastic.co/u/ananth)\ **Replies:** 1\ **Last updated:** [May 29, 2015, 5:51pm UTC](https://discuss.elastic.co/t/exact-match-query-on-analyzed-field/1440 "2015-05-29T17:51:49Z")
Hi , I have an analysed field , it may have different values for each documents. For example , doc1 : { "field1" : "abc01 - (http://abc01.com/)" } doc2 : { "field1" : "abc02 - (http://abc02.com/)" } doc3 : { … --- ## [Condition In Watcher](https://discuss.elastic.co/t/condition-in-watcher/110379)
**Author:** [@Jasonespo](https://discuss.elastic.co/u/Jasonespo)\ **Replies:** 5\ **Last updated:** [December 6, 2017, 10:59am UTC](https://discuss.elastic.co/t/condition-in-watcher/110379 "2017-12-06T10:59:32Z")
"condition": { "script": { "source": """ def offenders = \[\]; for (def source\_ip: ctx.payload.aggregations.source\_ip.buckets) { for (def X\_ID: sour… --- ## [prepareDelete returns JsonGenerator error](https://discuss.elastic.co/t/preparedelete-returns-jsongenerator-error/67547)
**Author:** [@mzwirek](https://discuss.elastic.co/u/mzwirek)\ **Replies:** 5\ **Last updated:** [November 29, 2016, 10:28pm UTC](https://discuss.elastic.co/t/preparedelete-returns-jsongenerator-error/67547 "2016-11-29T22:28:28Z")
Hi, I finally had to give up. I used the following (quite straightforward) code with ES 2.3.5 client: public static Client eSearchClient; DeleteResponse response = RuntimeConfiguration.eSearchClient .prepareDel… --- ## [Add multiple host on xpack.monitoring.elasticsearch.hosts with enviroment variable](https://discuss.elastic.co/t/add-multiple-host-on-xpack-monitoring-elasticsearch-hosts-with-enviroment-variable/289514)
**Author:** [@IsraelPerales](https://discuss.elastic.co/u/IsraelPerales)\ **Replies:** 2\ **Last updated:** [November 25, 2021, 1:02am UTC](https://discuss.elastic.co/t/add-multiple-host-on-xpack-monitoring-elasticsearch-hosts-with-enviroment-variable/289514 "2021-11-25T01:02:51Z")
Hi i try monitoring logstash for detect why i have delay on the logs ingest. But when i try put multiple hosts in the property xpack.monitoring.elasticsearch.hosts this fails . The value is injected with the envirome… --- ## [Index名に設定している日付が9時間ずれている](https://discuss.elastic.co/t/index-9/232524)
**Author:** [@harue](https://discuss.elastic.co/u/harue)\ **Replies:** 2\ **Last updated:** [May 14, 2020, 11:26pm UTC](https://discuss.elastic.co/t/index-9/232524 "2020-05-14T23:26:12Z")
お世話になります。 ingest nodeのdate\_index\_name processorを使用してindex名を設定しています。 以下のように、 投入データの@timestamp(UTC)からdate\_index\_nameにてtimezoneを"Asia/Tokyo" に指定してindex名にyyyyMM(日本時間に合わせた年月)を設定したいです。 simulateを実行したところ、 投入データの"@timestamp"… --- ## [Bulk insert API with json file not working](https://discuss.elastic.co/t/bulk-insert-api-with-json-file-not-working/212522)
**Author:** [@apizano](https://discuss.elastic.co/u/apizano)\ **Replies:** 2\ **Last updated:** [December 19, 2019, 8:07pm UTC](https://discuss.elastic.co/t/bulk-insert-api-with-json-file-not-working/212522 "2019-12-19T20:07:25Z")
Hi, I have a very large file with like 1 million records or 1,000,000 records (either way its a lot :D) I am using the curl command: $ curl -s -H "Content-Type: application/json" -XPOST localhost:9200/\_bulk --data-bina… --- ## [Manually insert logs](https://discuss.elastic.co/t/manually-insert-logs/151380)
**Author:** [@ariesow](https://discuss.elastic.co/u/ariesow)\ **Replies:** 2\ **Last updated:** [October 8, 2018, 4:01am UTC](https://discuss.elastic.co/t/manually-insert-logs/151380 "2018-10-08T04:01:46Z")
Hi, I have a question on putting log into ELK for devices what does not write logs elsewhere but only on its buffer. While we can export out the log into files manually, can we also manually input this file to ELK for l… --- ## [Downgrade elasticsearch from v5.6.2 to 5.5.0](https://discuss.elastic.co/t/downgrade-elasticsearch-from-v5-6-2-to-5-5-0/102906)
**Author:** [@abhijat](https://discuss.elastic.co/u/abhijat)\ **Replies:** 2\ **Last updated:** [October 5, 2017, 11:49pm UTC](https://discuss.elastic.co/t/downgrade-elasticsearch-from-v5-6-2-to-5-5-0/102906 "2017-10-05T23:49:52Z")
Can I downgrade elasticsearch from v5.6.2 to 5.5.0? --- ## [\[RFC\] idea for a near duplicate filter](https://discuss.elastic.co/t/rfc-idea-for-a-near-duplicate-filter/18937)
**Author:** [@Valentin\_Pletzer](https://discuss.elastic.co/u/Valentin_Pletzer)\ **Replies:** 1\ **Last updated:** [July 29, 2014, 2:50am UTC](https://discuss.elastic.co/t/rfc-idea-for-a-near-duplicate-filter/18937 "2014-07-29T02:50:10Z")
I have an idea for a filter with a technique I used on another project. I thought I should share because this might be useful to someone. Finding exact matches is an easy task but finding documents with small differen… --- ## [Elastic Agent 8.8.0 disk space requirement](https://discuss.elastic.co/t/elastic-agent-8-8-0-disk-space-requirement/334723)
**Author:** [@schapman](https://discuss.elastic.co/u/schapman)\ **Replies:** 6\ **Last updated:** [June 14, 2023, 2:49pm UTC](https://discuss.elastic.co/t/elastic-agent-8-8-0-disk-space-requirement/334723 "2023-06-14T14:49:08Z")
Just a heads up if installing the latest elastic agent on Linux servers with relatively small free space... It looks like the elastic-agent's requirement for disk space has increased (almost doubled?) over the past year… --- ## [Change the shards for index and terms aggregation query](https://discuss.elastic.co/t/change-the-shards-for-index-and-terms-aggregation-query/182467)
**Author:** [@klaus82](https://discuss.elastic.co/u/klaus82)\ **Replies:** 6\ **Last updated:** [May 29, 2019, 6:45am UTC](https://discuss.elastic.co/t/change-the-shards-for-index-and-terms-aggregation-query/182467 "2019-05-29T06:45:02Z")
Currently, I have two nodes on Elastic Cloud and my indexes have one shard and one replica each. If I'd increase to 3 the number of nodes and I'd reindex my indexes with two shards and one replica, could I have a differ… [Previous page](https://discuss.elastic.co/top.md?page=957&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=959&per_page=50&period=all)