# Top **URL:** https://discuss.elastic.co/top.md?page=970&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 971 --- ## [Effectively partial update array field in ElasticSearch](https://discuss.elastic.co/t/effectively-partial-update-array-field-in-elasticsearch/288984)
**Author:** [@fatcloud](https://discuss.elastic.co/u/fatcloud)\ **Replies:** 1\ **Last updated:** [November 15, 2021, 11:22pm UTC](https://discuss.elastic.co/t/effectively-partial-update-array-field-in-elasticsearch/288984 "2021-11-15T23:22:40Z")
Hi elastic experts, I'm wondering if there is a way to effectively partial update an element in an array field? For example, a document has a commands field like this: "commands": \[ { "id": 1000, "content": "a… --- ## [Automate applying a pipeline to documents](https://discuss.elastic.co/t/automate-applying-a-pipeline-to-documents/276059)
**Author:** [@Spricer](https://discuss.elastic.co/u/Spricer)\ **Replies:** 7\ **Last updated:** [June 17, 2021, 2:41pm UTC](https://discuss.elastic.co/t/automate-applying-a-pipeline-to-documents/276059 "2021-06-17T14:41:25Z")
I created "mypipeline" pipeline with grok processor. I have syslog-ng-(xx) indexes created daily. If I apply in console: POST syslog-ng\*/\_update\_by\_query?pipeline=mypipeline I can see all my indexes get updated and s… --- ## [How to find numbers starting with 80?](https://discuss.elastic.co/t/how-to-find-numbers-starting-with-80/186273)
**Author:** [@Gosforth](https://discuss.elastic.co/u/Gosforth)\ **Replies:** 7\ **Last updated:** [June 20, 2019, 3:23am UTC](https://discuss.elastic.co/t/how-to-find-numbers-starting-with-80/186273 "2019-06-20T03:23:48Z")
Hi, Kibana Discover option. I'd like to display all docs that has filed value (number) starting with 20. Possible to do this? In SQL it would be ...WHERE field1 LIKE '20%' How to do this in Kibana? Regards --- ## [I'm a noob at subnets / network masks and can't get my nodes to discover each other](https://discuss.elastic.co/t/im-a-noob-at-subnets-network-masks-and-cant-get-my-nodes-to-discover-each-other/110932)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 7\ **Last updated:** [December 11, 2017, 4:38am UTC](https://discuss.elastic.co/t/im-a-noob-at-subnets-network-masks-and-cant-get-my-nodes-to-discover-each-other/110932 "2017-12-11T04:38:27Z")
Can someone please tell me what I'm doing wrong? I'm using three Amazon EC2 servers and I just want them to discover each other and form a cluster. They are part of a private subnet. How should I add this to their elast… --- ## [Brute Force query in ELK](https://discuss.elastic.co/t/brute-force-query-in-elk/75726)
**Author:** [@ANU\_SARA\_VARGHESE](https://discuss.elastic.co/u/ANU_SARA_VARGHESE)\ **Replies:** 1\ **Last updated:** [February 20, 2017, 12:44pm UTC](https://discuss.elastic.co/t/brute-force-query-in-elk/75726 "2017-02-20T12:44:59Z")
Hi, I am trying to create a successful brute force attempts. For that I am writing a ruby code in logstash. Is there any other method like writing a query in elasticsearch, so that I could meet the logic of the succe… --- ## [How to regex urls with Grok](https://discuss.elastic.co/t/how-to-regex-urls-with-grok/318011)
**Author:** [@lamdba](https://discuss.elastic.co/u/lamdba)\ **Replies:** 2\ **Last updated:** [November 3, 2022, 9:46am UTC](https://discuss.elastic.co/t/how-to-regex-urls-with-grok/318011 "2022-11-03T09:46:21Z")
Hello there, Sorry to bother but I'm slowly working my way to fully use and understand the stack and right now I'm blocked with a (I guess) simple problem with Logstash. I parse multiple events through Logstash and eve… --- ## [How can I monitoring these things?](https://discuss.elastic.co/t/how-can-i-monitoring-these-things/133441)
**Author:** [@WanLi\_Chen](https://discuss.elastic.co/u/WanLi_Chen)\ **Replies:** 2\ **Last updated:** [May 29, 2018, 1:58am UTC](https://discuss.elastic.co/t/how-can-i-monitoring-these-things/133441 "2018-05-29T01:58:44Z")
Hi \*, I'm new to elastic, I am wondering how can I get charts with es: Hard drive's S.M.A.R.T info ,so I can monitoring hundred disk's temperature... UPS info with snmp output IPMI device, etc the sensors' data thank… --- ## [\[SOLVED\] How to filter log from syslog input](https://discuss.elastic.co/t/solved-how-to-filter-log-from-syslog-input/47097)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 2\ **Last updated:** [April 13, 2016, 10:17am UTC](https://discuss.elastic.co/t/solved-how-to-filter-log-from-syslog-input/47097 "2016-04-13T10:17:37Z")
i have logstash instanse using syslog input plugin for get log from access point . I try to save log to file (using file output) and i get some line log (json format) {"tags":\["\_grokparsefailure\_sysloginput"\],"message… --- ## [Kafka consumer issue](https://discuss.elastic.co/t/kafka-consumer-issue/44840)
**Author:** [@ravitandur](https://discuss.elastic.co/u/ravitandur)\ **Replies:** 2\ **Last updated:** [March 31, 2016, 7:56am UTC](https://discuss.elastic.co/t/kafka-consumer-issue/44840 "2016-03-31T07:56:29Z")
We are using logstash kafka input plugin to process the data from kafka. We are running 3 log stash instances with following config: input { heartbeat { interval =\> 60 type =\> "heartbeat" add\_… --- ## [Count of term occurrences in fields?](https://discuss.elastic.co/t/count-of-term-occurrences-in-fields/12558)
**Author:** [@Rob\_Styles](https://discuss.elastic.co/u/Rob_Styles)\ **Replies:** 2\ **Last updated:** [June 27, 2013, 10:00am UTC](https://discuss.elastic.co/t/count-of-term-occurrences-in-fields/12558 "2013-06-27T10:00:15Z")
Hi, I'm wondering if I might be able to use es to help solve an entity classification problem I'm working on. I'm trying to classify words or phrases by type based on a corpus of data. For example... We might hav… --- ## [Trigger output Exec once if file exists](https://discuss.elastic.co/t/trigger-output-exec-once-if-file-exists/196830)
**Author:** [@baselai](https://discuss.elastic.co/u/baselai)\ **Replies:** 8\ **Last updated:** [August 27, 2019, 1:38pm UTC](https://discuss.elastic.co/t/trigger-output-exec-once-if-file-exists/196830 "2019-08-27T13:38:44Z")
I have this logstash conf. file: input { file { path =\> "/usr/share/src-input/x\_tran.csv" start\_position =\> beginning sincedb\_path =\> "/dev/null" mode =\> read } } output { exec { comma… --- ## [How to Visualize a Metric. Difference Between Current Week and Last Week](https://discuss.elastic.co/t/how-to-visualize-a-metric-difference-between-current-week-and-last-week/235392)
**Author:** [@Magnuss](https://discuss.elastic.co/u/Magnuss)\ **Replies:** 4\ **Last updated:** [June 4, 2020, 12:48pm UTC](https://discuss.elastic.co/t/how-to-visualize-a-metric-difference-between-current-week-and-last-week/235392 "2020-06-04T12:48:11Z")
Hello All, I'm currently trying to visualize some data. Everyday at 6 am my data will be ingested into Elasticsearch. The data contains information like product titles, stock, prices etc etc. So everyday a new document… --- ## [Logstash OutOfMemoryError](https://discuss.elastic.co/t/logstash-outofmemoryerror/45265)
**Author:** [@yammy](https://discuss.elastic.co/u/yammy)\ **Replies:** 4\ **Last updated:** [April 16, 2016, 12:31pm UTC](https://discuss.elastic.co/t/logstash-outofmemoryerror/45265 "2016-04-16T12:31:03Z")
I've just started using logstash 2.2.2 with 3 hosts uploading a combined average of 20,000 events per day. Using Filebeat 1.1 to forward events. Typically after about 12 hours I will get the OutOfMemoryError in the logst… --- ## [TheHIVE integration for SIEM Case Management](https://discuss.elastic.co/t/thehive-integration-for-siem-case-management/209129)
**Author:** [@ch3no2](https://discuss.elastic.co/u/ch3no2)\ **Replies:** 1\ **Last updated:** [November 29, 2019, 2:55pm UTC](https://discuss.elastic.co/t/thehive-integration-for-siem-case-management/209129 "2019-11-29T14:55:16Z")
In the last Elastic SIEM Presentation (11/21/2019), the presentation showed the integration with MISP... Is that the same MISP that is part of TheHive ? AND is there is there any consideration of having hooks in the SI… --- ## [Bulk import via node.js script](https://discuss.elastic.co/t/bulk-import-via-node-js-script/27168)
**Author:** [@Charlie\_Schliesser](https://discuss.elastic.co/u/Charlie_Schliesser)\ **Replies:** 1\ **Last updated:** [August 11, 2015, 9:08am UTC](https://discuss.elastic.co/t/bulk-import-via-node-js-script/27168 "2015-08-11T09:08:58Z")
What are some best practices for bulk importing docs via node.js? I'm using the module found at https://www.npmjs.com/package/elasticsearch and need to import ~ 20 million docs. I've tried importing them in batches of … --- ## [\[JSON filter\] Split Dynamic fields](https://discuss.elastic.co/t/json-filter-split-dynamic-fields/167774)
**Author:** [@manunc](https://discuss.elastic.co/u/manunc)\ **Replies:** 3\ **Last updated:** [February 11, 2019, 12:37pm UTC](https://discuss.elastic.co/t/json-filter-split-dynamic-fields/167774 "2019-02-11T12:37:13Z")
Hello, I try to create an event for each fields named "XXX.YY" coming from the following JSON message (data object): {"data":{ "316.2":\[{"sensorId":"316.2.3","sensorTime":1549599391,"sensorValue":0.08}\], "315.10":\[{"… --- ## [Multicheckbox Facet Query](https://discuss.elastic.co/t/multicheckbox-facet-query/228527)
**Author:** [@Rohit\_Kumar](https://discuss.elastic.co/u/Rohit_Kumar)\ **Replies:** 5\ **Last updated:** [April 17, 2020, 3:04pm UTC](https://discuss.elastic.co/t/multicheckbox-facet-query/228527 "2020-04-17T15:04:25Z")
Hi guys, I am using the MultiCheckboxFacet for facet . By default it allows us to select multi chekboxes for filtering results, but i have some situation that i only wanted to allow single selected checkbox. i.e After… --- ## [Elastic search not starting please help](https://discuss.elastic.co/t/elastic-search-not-starting-please-help/190650)
**Author:** [@Prashant\_dave](https://discuss.elastic.co/u/Prashant_dave)\ **Replies:** 5\ **Last updated:** [July 16, 2019, 2:05pm UTC](https://discuss.elastic.co/t/elastic-search-not-starting-please-help/190650 "2019-07-16T14:05:59Z")
● elasticsearch.service - Elasticsearch Loaded: loaded (/usr/lib/systemd/system/elasticsearch.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Tue 2019-07-16 11:10:16 IST; 9s ago Docs… --- ## [Kibana and Plugins on Elasticsearch cluster](https://discuss.elastic.co/t/kibana-and-plugins-on-elasticsearch-cluster/66287)
**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\ **Replies:** 6\ **Last updated:** [December 10, 2016, 12:30am UTC](https://discuss.elastic.co/t/kibana-and-plugins-on-elasticsearch-cluster/66287 "2016-12-10T00:30:00Z")
Hello, We are trying to set up a dockerized elasticsearch cluster with 10 data nodes and 3 dedicated master nodes with version 2.4 We wanted to add 1. kibana 4.6.2 2. shield 2.4 for security 3. Marvel 2.4 for monito… --- ## [Why does scaling Elastic Search on 2 nodes gives no performance gain?](https://discuss.elastic.co/t/why-does-scaling-elastic-search-on-2-nodes-gives-no-performance-gain/49077)
**Author:** [@srdealx](https://discuss.elastic.co/u/srdealx)\ **Replies:** 6\ **Last updated:** [May 6, 2016, 10:39am UTC](https://discuss.elastic.co/t/why-does-scaling-elastic-search-on-2-nodes-gives-no-performance-gain/49077 "2016-05-06T10:39:34Z")
I've installed ES on 2 nodes, configured them to run in the same cluster but got no gain in performance (on my test cases I've actually got an average 6% increase in search duration). I used queries that range from 10… --- ## [Stopwords in term aggregation](https://discuss.elastic.co/t/stopwords-in-term-aggregation/34082)
**Author:** [@knob1](https://discuss.elastic.co/u/knob1)\ **Replies:** 6\ **Last updated:** [November 7, 2015, 5:55pm UTC](https://discuss.elastic.co/t/stopwords-in-term-aggregation/34082 "2015-11-07T17:55:38Z")
I want to filter the stop words from the term aggregation, so I defined an analyzer with a custom stop word list (around 1000 words) and applied it to my index. If I query the index to do a term aggregation I get a res… --- ## [How to get the Key](https://discuss.elastic.co/t/how-to-get-the-key/31701)
**Author:** [@Juan\_Andres\_Ramirez](https://discuss.elastic.co/u/Juan_Andres_Ramirez)\ **Replies:** 6\ **Last updated:** [October 7, 2015, 12:59pm UTC](https://discuss.elastic.co/t/how-to-get-the-key/31701 "2015-10-07T12:59:42Z")
Hello Guys, I need to know how to get a specific key named source, it's inside the section \_source. First I executed command: curl -XGET 'http://10.101.81.199:9200/graylog2\_20/\_search?pretty' -d '{ "query": {… --- ## [How to re-arrange or sort fields of \_source in kibana , by default kibana is sorting alphabetically?](https://discuss.elastic.co/t/how-to-re-arrange-or-sort-fields-of-source-in-kibana-by-default-kibana-is-sorting-alphabetically/212780)
**Author:** [@bunny\_rocker](https://discuss.elastic.co/u/bunny_rocker)\ **Replies:** 2\ **Last updated:** [December 24, 2019, 2:42am UTC](https://discuss.elastic.co/t/how-to-re-arrange-or-sort-fields-of-source-in-kibana-by-default-kibana-is-sorting-alphabetically/212780 "2019-12-24T02:42:43Z")
Hi Team, I am using kibana to display log records, my data seems to reside in \_source field, and being sorted alphabetically. Is there any way to list only certain prt of \_source field or to sort fields in non-alphabeti… --- ## [Multiple custom grok patterns not matching, but they successfully match alone?](https://discuss.elastic.co/t/multiple-custom-grok-patterns-not-matching-but-they-successfully-match-alone/193175)
**Author:** [@kmiklas](https://discuss.elastic.co/u/kmiklas)\ **Replies:** 2\ **Last updated:** [August 6, 2019, 1:28pm UTC](https://discuss.elastic.co/t/multiple-custom-grok-patterns-not-matching-but-they-successfully-match-alone/193175 "2019-08-06T13:28:20Z")
Grok matches single custom patterns, but does match when custom patterns are combined. Complete, working, an verifiable example Sample data: OK 05/20 20:12:10:067 ABC\_02~~DE\_02 FGH\_IJK jsmith \_A0011 Custom patterns: … --- ## [Elasticsearch ILM pattern suffix](https://discuss.elastic.co/t/elasticsearch-ilm-pattern-suffix/199822)
**Author:** [@stevesimpson](https://discuss.elastic.co/u/stevesimpson)\ **Replies:** 0\ **Last updated:** [September 17, 2019, 1:03pm UTC](https://discuss.elastic.co/t/elasticsearch-ilm-pattern-suffix/199822 "2019-09-17T13:03:53Z")
Hi, I'd like to find a way to "reset" the ILM pattern suffix number. My indexes are written as follows: filebeat-2019.09.16-000034 filebeat-2019.09.16-000035 filebeat-2019.09.16-000036 filebeat-2019.09.16-000037 filebe… --- ## [Optimizing Index that has grown far too large, suggested settings based on experience needed!](https://discuss.elastic.co/t/optimizing-index-that-has-grown-far-too-large-suggested-settings-based-on-experience-needed/224314)
**Author:** [@ford](https://discuss.elastic.co/u/ford)\ **Replies:** 1\ **Last updated:** [March 20, 2020, 9:43am UTC](https://discuss.elastic.co/t/optimizing-index-that-has-grown-far-too-large-suggested-settings-based-on-experience-needed/224314 "2020-03-20T09:43:07Z")
So I have an index that I did not expect to grow to the size it's at now, it was setup very naively. I've put off updating it long enough, time to set up a fresh cluster designed for the load! The Index has reached a tot… --- ## [LogStash::Json::ParserError: Invalid numeric value: Leading zeroes not allowed](https://discuss.elastic.co/t/logstash-invalid-numeric-value-leading-zeroes-not-allowed/186150)
**Author:** [@valleram](https://discuss.elastic.co/u/valleram)\ **Replies:** 1\ **Last updated:** [June 17, 2019, 8:42pm UTC](https://discuss.elastic.co/t/logstash-invalid-numeric-value-leading-zeroes-not-allowed/186150 "2019-06-17T20:42:18Z")
Hi, I'm trying to parse some json strings which contain an integer field with the value duration":0000. I tried to convert it to string type but didn't work. I'm still receiving the following error. #\ **Author:** [@teemoGod](https://discuss.elastic.co/u/teemoGod)\ **Replies:** 1\ **Last updated:** [January 21, 2019, 8:24am UTC](https://discuss.elastic.co/t/can-i-config-default-columns-by-index/165000 "2019-01-21T08:24:23Z") hi. im using kibana 6.4.1 in 'Discover' tab, i want to show designated field by default. but, there is 2 index. i want to set index1's 'Defalut Field' to 'index1\_field' and i want to set index2's 'Default Field' to … --- ## [Indices naming](https://discuss.elastic.co/t/indices-naming/64621)
**Author:** [@cjs6891](https://discuss.elastic.co/u/cjs6891)\ **Replies:** 7\ **Last updated:** [November 3, 2016, 2:27am UTC](https://discuss.elastic.co/t/indices-naming/64621 "2016-11-03T02:27:26Z")
while using ELK 2.4 my indice directories would be created as follows: "logstash-YYYY-MM-DD". ELK 5 is creating them with some random string, ex. "ELK\_5.0/elasticsearch-5.0.0/data/nodes/0/indices/wsCmtji0QCy8K0B5JyTuvQ" … --- ## [Timelion timeseries in kibana visualise](https://discuss.elastic.co/t/timelion-timeseries-in-kibana-visualise/45971)
**Author:** [@alainc](https://discuss.elastic.co/u/alainc)\ **Replies:** 1\ **Last updated:** [March 31, 2016, 7:57pm UTC](https://discuss.elastic.co/t/timelion-timeseries-in-kibana-visualise/45971 "2016-03-31T19:57:39Z")
Hi just discovered the timeseries visualise option inside kibana 4.5 great thing but... it seems that the timeseries only compute base on his internal timelion syntax/filtering and so only change value if i adjust the … --- ## [How to assure that search results are the same numeric type as they are mapped to? (Integer vs Long)](https://discuss.elastic.co/t/how-to-assure-that-search-results-are-the-same-numeric-type-as-they-are-mapped-to-integer-vs-long/35095)
**Author:** [@tbessie](https://discuss.elastic.co/u/tbessie)\ **Replies:** 4\ **Last updated:** [September 12, 2016, 7:03am UTC](https://discuss.elastic.co/t/how-to-assure-that-search-results-are-the-same-numeric-type-as-they-are-mapped-to-integer-vs-long/35095 "2016-09-12T07:03:29Z")
When I have indexed some data, and some fields are stored as long's, when I retrieve it with Java, they are converted to Java Integer values, not retained as longs, despite their storage type in the index. I have searc… --- ## [Shard rebalancing on Elasticsearch 1.7.1](https://discuss.elastic.co/t/shard-rebalancing-on-elasticsearch-1-7-1/36513)
**Author:** [@gpong](https://discuss.elastic.co/u/gpong)\ **Replies:** 4\ **Last updated:** [December 8, 2015, 8:52am UTC](https://discuss.elastic.co/t/shard-rebalancing-on-elasticsearch-1-7-1/36513 "2015-12-08T08:52:47Z")
Hi, I have two nodes on my cluster lets say node1 and node2. After I restarting the node2 the shards is not balance anymore. All active shards is on node1. How to make the shards is balanced between two nodes?? Thanks … --- ## [Detected an unhandled Promise rejection.\\nResponseError: \[parent\] Data too large, data for](https://discuss.elastic.co/t/detected-an-unhandled-promise-rejection-nresponseerror-parent-data-too-large-data-for/287172)
**Author:** [@Mesut\_Yilmaz](https://discuss.elastic.co/u/Mesut_Yilmaz)\ **Replies:** 3\ **Last updated:** [October 20, 2021, 10:08am UTC](https://discuss.elastic.co/t/detected-an-unhandled-promise-rejection-nresponseerror-parent-data-too-large-data-for/287172 "2021-10-20T10:08:18Z")
Hi there, I am suffering with this issue on kibana.log elastic cluster is up but kibana doesnt come up. JVM heapsize is set 32GB and VMs have 64GB Memories. What could be reason for this error? \` Management,enterpriseS… --- ## [Error in index or visualisations for "\[Metricbeat System\] Overview ECS"](https://discuss.elastic.co/t/error-in-index-or-visualisations-for-metricbeat-system-overview-ecs/201490)
**Author:** [@bodo.te](https://discuss.elastic.co/u/bodo.te)\ **Replies:** 3\ **Last updated:** [September 28, 2019, 9:28pm UTC](https://discuss.elastic.co/t/error-in-index-or-visualisations-for-metricbeat-system-overview-ecs/201490 "2019-09-28T21:28:45Z")
After setting up ELK 7.3.1 according to ELK Tutorial : https://www.elastic.co/guide/en/elastic-stack-get-started/current/get-started-elastic-stack.html and looking in to this dashboard: "\[Metricbeat System\] Overview E… --- ## [Query on @timestamp mapping](https://discuss.elastic.co/t/query-on-timestamp-mapping/59870)
**Author:** [@sharath3185](https://discuss.elastic.co/u/sharath3185)\ **Replies:** 3\ **Last updated:** [September 6, 2016, 12:31pm UTC](https://discuss.elastic.co/t/query-on-timestamp-mapping/59870 "2016-09-06T12:31:26Z")
Hi, I have a logstash config file which parses some logs and indexes them into elasticsearch. I have renamed the @timestamp field to "timestamp" field for my convenience in my project as below mutate { … --- ## [\[Painless script\] i\_o\_exception: can not write type \[class java.lang.StringBuffer\]](https://discuss.elastic.co/t/painless-script-i-o-exception-can-not-write-type-class-java-lang-stringbuffer/154632)
**Author:** [@junkoshimane](https://discuss.elastic.co/u/junkoshimane)\ **Replies:** 2\ **Last updated:** [October 31, 2018, 2:06am UTC](https://discuss.elastic.co/t/painless-script-i-o-exception-can-not-write-type-class-java-lang-stringbuffer/154632 "2018-10-31T02:06:11Z")
Hi all, I'm new to painless scripting. I faced the exception as described in the above title. Would you please tell my why? 1.All documents \[adminadmin@js ~\]$ cat query\_all.json { "query" : { "match\_all": {} } }… --- ## [Date Filter from DD/MMM/YYYY:hh:MM:ss to @timestamp not working](https://discuss.elastic.co/t/date-filter-from-dd-mmm-yyyymm-ss-to-timestamp-not-working/135007)
**Author:** [@nareshreddyp](https://discuss.elastic.co/u/nareshreddyp)\ **Replies:** 2\ **Last updated:** [June 7, 2018, 3:39pm UTC](https://discuss.elastic.co/t/date-filter-from-dd-mmm-yyyymm-ss-to-timestamp-not-working/135007 "2018-06-07T15:39:24Z")
I want to match the date and timestamp from the log file. Date from my logfile is below 07/Jun/2018:04:35:00.458 I have used grok filter to extract the information using (?%{MONTHDAY}/%{MONTH}/%{YEAR}:%{HOUR}:%{MINUTE… --- ## [X-pack installation in elasticsearch](https://discuss.elastic.co/t/x-pack-installation-in-elasticsearch/95808)
**Author:** [@ny2359](https://discuss.elastic.co/u/ny2359)\ **Replies:** 2\ **Last updated:** [August 7, 2017, 9:22pm UTC](https://discuss.elastic.co/t/x-pack-installation-in-elasticsearch/95808 "2017-08-07T21:22:31Z")
x-pack 5.5.0 zip file installation failure using elasticsearch-plugin.bat install file:\\\\ and logstash install issue Kibana install of x-pack was successful Host server is windows 2012 R2 standard 2 CPU 1.9 GH… --- ## [Elasticssearch - Inserting index -Exception - InvalidTypeNameException - message too long](https://discuss.elastic.co/t/elasticssearch-inserting-index-exception-invalidtypenameexception-message-too-long/43520)
**Author:** [@Vivek\_rai](https://discuss.elastic.co/u/Vivek_rai)\ **Replies:** 2\ **Last updated:** [March 4, 2016, 3:29pm UTC](https://discuss.elastic.co/t/elasticssearch-inserting-index-exception-invalidtypenameexception-message-too-long/43520 "2016-03-04T15:29:01Z")
Code is to insert the index into index 'ltables' with the jSON structure as below in the exception trace. Please let me know what iam doing wrong, i do not want all of the fields to be indexed and hence i executed the m… --- ## [Logstash error "Missing kbn-version header"](https://discuss.elastic.co/t/logstash-error-missing-kbn-version-header/39776)
**Author:** [@poornima](https://discuss.elastic.co/u/poornima)\ **Replies:** 2\ **Last updated:** [January 22, 2016, 10:30am UTC](https://discuss.elastic.co/t/logstash-error-missing-kbn-version-header/39776 "2016-01-22T10:30:30Z")
I am new to ELK and have installed ES 2.1.1, Kibana 4.3.1, Logstash 2.1.1 on Windows. After running Logstash, getting error "Missing kbn-version header" . Attached snapshot of the error seen in logstash and also in… --- ## [Output file rotation](https://discuss.elastic.co/t/output-file-rotation/26921)
**Author:** [@mparthas](https://discuss.elastic.co/u/mparthas)\ **Replies:** 2\ **Last updated:** [August 5, 2015, 9:11pm UTC](https://discuss.elastic.co/t/output-file-rotation/26921 "2015-08-05T21:11:15Z")
Hi, I see that max\_size for the output file has not been implemented yet. I am finding a way where Logstash will write to an output file and close the file which then can serve as the indication that it is done with th… --- ## [Watcher action error](https://discuss.elastic.co/t/watcher-action-error/89618)
**Author:** [@santhosh](https://discuss.elastic.co/u/santhosh)\ **Replies:** 1\ **Last updated:** [June 16, 2017, 6:16am UTC](https://discuss.elastic.co/t/watcher-action-error/89618 "2017-06-16T06:16:48Z")
I have noticed this exception in watcher history. I couldn't find much answers on internet, but by looking through the error statement, I can understand it suggests not to run more watch at same time. In our server, ther… --- ## [Timelion kibana='false' option is not working?](https://discuss.elastic.co/t/timelion-kibana-false-option-is-not-working/84220)
**Author:** [@pchanas](https://discuss.elastic.co/u/pchanas)\ **Replies:** 5\ **Last updated:** [May 4, 2017, 6:13am UTC](https://discuss.elastic.co/t/timelion-kibana-false-option-is-not-working/84220 "2017-05-04T06:13:44Z")
I have a very obvious need: computing a ratio between 2 time series. What I want is that kibana filters (of my dahsboard) only apply on one of the 2 series. I did the following simple test : es(index='myindex', q='\_typ… --- ## [Sending Beat data from AWS to a server with a private IP](https://discuss.elastic.co/t/sending-beat-data-from-aws-to-a-server-with-a-private-ip/81750)
**Author:** [@onlybalu](https://discuss.elastic.co/u/onlybalu)\ **Replies:** 5\ **Last updated:** [April 10, 2017, 10:07am UTC](https://discuss.elastic.co/t/sending-beat-data-from-aws-to-a-server-with-a-private-ip/81750 "2017-04-10T10:07:30Z")
Hi Team, I am new to this, Need to get the Windows Event Logs from AWS cloud to my VMware Ubuntu Logstash server. I am not able to connect to my Ubuntu Logstash server (private ip) from an AWS Windows cloud instance … --- ## [Machine Learning Real-time search doesn't work](https://discuss.elastic.co/t/machine-learning-real-time-search-doesnt-work/109502)
**Author:** [@serive](https://discuss.elastic.co/u/serive)\ **Replies:** 6\ **Last updated:** [December 4, 2017, 1:17am UTC](https://discuss.elastic.co/t/machine-learning-real-time-search-doesnt-work/109502 "2017-12-04T01:17:30Z")
When I made single metric job with Aggregation: count Bucket span: 10m and start datafeed "No end time (Real-time search)", real-time search didn't start at all. At that time, I stopped datafeeed, edit job to change… --- ## [Dead Link For Offline Install X-Pack 6.0.0](https://discuss.elastic.co/t/dead-link-for-offline-install-x-pack-6-0-0/99630)
**Author:** [@John\_Sobanski](https://discuss.elastic.co/u/John_Sobanski)\ **Replies:** 6\ **Last updated:** [September 9, 2017, 10:36pm UTC](https://discuss.elastic.co/t/dead-link-for-offline-install-x-pack-6-0-0/99630 "2017-09-09T22:36:11Z")
Expected behavior: Download offline zip for X-Pack 6.0.0 Actual behavior: Dead Link The X-Pack 6.0.0 documentation reads as follows: If you want to install X-Pack on a machine that doesn’t have internet access: Manua… --- ## [Duplicated indices](https://discuss.elastic.co/t/duplicated-indices/95486)
**Author:** [@DFrant](https://discuss.elastic.co/u/DFrant)\ **Replies:** 6\ **Last updated:** [August 4, 2017, 8:58am UTC](https://discuss.elastic.co/t/duplicated-indices/95486 "2017-08-04T08:58:24Z")
Hello, When I do a GET \_cat/indices, I see that there is an index created twice for my data log: yellow open .kibana RE2BXwgDSnuWmXlFvEn9BA 1 1 4 0 35.3kb 35.3kb yellow open carxx-2017.07.02 yAMp8… --- ## [Multiple pipelines output to one cluster - only one of them picks up logs](https://discuss.elastic.co/t/multiple-pipelines-output-to-one-cluster-only-one-of-them-picks-up-logs/257877)
**Author:** [@Ilya\_Geller](https://discuss.elastic.co/u/Ilya_Geller)\ **Replies:** 4\ **Last updated:** [December 7, 2020, 8:38pm UTC](https://discuss.elastic.co/t/multiple-pipelines-output-to-one-cluster-only-one-of-them-picks-up-logs/257877 "2020-12-07T20:38:48Z")
Hi, I have a logstash node that has two pipelines that pick up different inputs and do separate things but both of them output to the same ES cluster into different indeces. Both pipelines have the following defined: … --- ## [Kibana HEAP Allocation in k8s/docker](https://discuss.elastic.co/t/kibana-heap-allocation-in-k8s-docker/221860)
**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\ **Replies:** 4\ **Last updated:** [March 4, 2020, 11:31am UTC](https://discuss.elastic.co/t/kibana-heap-allocation-in-k8s-docker/221860 "2020-03-04T11:31:52Z")
Hi, I am running kibana in k8s with requests/limits set for cpu & ram. Upper memory limit is 2GB. I'm seeing periodic out of memory errors and am going to raise the upper container limit. Given that I have been seeing … --- ## [Class cast exception in Rest High Level Client](https://discuss.elastic.co/t/class-cast-exception-in-rest-high-level-client/168011)
**Author:** [@ganil.89](https://discuss.elastic.co/u/ganil.89)\ **Replies:** 3\ **Last updated:** [February 20, 2019, 8:59am UTC](https://discuss.elastic.co/t/class-cast-exception-in-rest-high-level-client/168011 "2019-02-20T08:59:44Z")
I have an index with one of the field type is double. Using Transport client, I am able to get data from api. When migrated to Rest High Level Client, I am getting below error. org.elasticsearch.ElasticsearchExcepti… [Previous page](https://discuss.elastic.co/top.md?page=969&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=971&per_page=50&period=all)