# Top

**URL:** https://discuss.elastic.co/top.md?page=971&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 972

---

## [Stop Kibana Discover Auto Search](https://discuss.elastic.co/t/stop-kibana-discover-auto-search/165504)

<div class="topic-metadata">

**Author:** [@kdotson](https://discuss.elastic.co/u/kdotson)\
**Replies:** 3\
**Last updated:** [January 25, 2019, 8:17pm UTC](https://discuss.elastic.co/t/stop-kibana-discover-auto-search/165504 "2019-01-25T20:17:50Z")

</div>

Hello, I am looking for a way to stop Kibana from automatically searching, or refreshing the last search, when a user clicks on the Discover (or Dashboard or Visualize, etc) and instead only trigger the search when the …

---

## [Logstash.runner Fatal error TypeError: illegal access on 'getThreadCount'](https://discuss.elastic.co/t/logstash-runner-fatal-error-typeerror-illegal-access-on-getthreadcount/116674)

<div class="topic-metadata">

**Author:** [@sujalkpatel](https://discuss.elastic.co/u/sujalkpatel)\
**Replies:** 3\
**Last updated:** [January 30, 2018, 8:49am UTC](https://discuss.elastic.co/t/logstash-runner-fatal-error-typeerror-illegal-access-on-getthreadcount/116674 "2018-01-30T08:49:29Z")

</div>

I am running LogStash for very first time. So I have no idea what's going on. Please help someone. I appreciate it in advance. Thank you. \[2018-01-23T05:04:22,719\]\[FATAL\]\[logstash.runner \] An unexpected error occurred! …

---

## [S3 snapshot repository](https://discuss.elastic.co/t/s3-snapshot-repository/114185)

<div class="topic-metadata">

**Author:** [@rpendela](https://discuss.elastic.co/u/rpendela)\
**Replies:** 3\
**Last updated:** [January 6, 2018, 4:24pm UTC](https://discuss.elastic.co/t/s3-snapshot-repository/114185 "2018-01-06T16:24:22Z")

</div>

Hello Community, I am trying to take the snapshots of indices and send them to S3, I installed S3 plugin and Curator. I am running ELK stack using docker compose, trying to create S3 as a repository but getting this er…

---

## [How to delete rollover indices , using deprecated query](https://discuss.elastic.co/t/how-to-delete-rollover-indices-using-deprecated-query/104430)

<div class="topic-metadata">

**Author:** [@Kim-Kruse-Hansen](https://discuss.elastic.co/u/Kim-Kruse-Hansen)\
**Replies:** 3\
**Last updated:** [November 1, 2017, 3:42pm UTC](https://discuss.elastic.co/t/how-to-delete-rollover-indices-using-deprecated-query/104430 "2017-11-01T15:42:38Z")

</div>

Hi Question is basically a copy of this question, but it remains unanswered, I am considering switching from daily indices style to rollover style. So I was reading your article about how to implement it: And the big…

---

## [MongoDB Input Plugin to Logstash](https://discuss.elastic.co/t/mongodb-input-plugin-to-logstash/65662)

<div class="topic-metadata">

**Author:** [@aHazeem](https://discuss.elastic.co/u/aHazeem)\
**Replies:** 0\
**Last updated:** [November 10, 2016, 12:55pm UTC](https://discuss.elastic.co/t/mongodb-input-plugin-to-logstash/65662 "2016-11-10T12:55:46Z")

</div>

We are new adopters to ELK and coming from MS background. However, we are trying to switch to the open source world. We've been already using MongoDB with a new system and we're also trying to use ELK to analyse the d…

---

## [CPU overload due to a java exception](https://discuss.elastic.co/t/cpu-overload-due-to-a-java-exception/42857)

<div class="topic-metadata">

**Author:** [@vmichalak](https://discuss.elastic.co/u/vmichalak)\
**Replies:** 3\
**Last updated:** [February 29, 2016, 7:18pm UTC](https://discuss.elastic.co/t/cpu-overload-due-to-a-java-exception/42857 "2016-02-29T19:18:17Z")

</div>

Hi everyone, I have a problem. The load Average of my server up abnormally during 5 minutes randomly during the day. I checked my elasticsearch logs and i saw : \[2016-02-26 12:55:54,106\]\[WARN \]\[http.netty …

---

## [Custom timestamp](https://discuss.elastic.co/t/custom-timestamp/29188)

<div class="topic-metadata">

**Author:** [@scaarup](https://discuss.elastic.co/u/scaarup)\
**Replies:** 3\
**Last updated:** [September 13, 2015, 2:23pm UTC](https://discuss.elastic.co/t/custom-timestamp/29188 "2015-09-13T14:23:46Z")

</div>

Hi guys. I would like kibana to use my timestamp which are in the logfiles fed from logstash. My logstash conf looks like: filter { if \[type\] == "dibslog" { grok { match =\> { "message" =\> "%…

---

## [JSON Filter Making Events Disappear](https://discuss.elastic.co/t/json-filter-making-events-disappear/256199)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 7\
**Last updated:** [November 25, 2020, 5:08pm UTC](https://discuss.elastic.co/t/json-filter-making-events-disappear/256199 "2020-11-25T17:08:21Z")

</div>

I've been using the same filter configuration across multiple upgrades of Logstash. After upgrading to 7.10.0, the JSON filter now makes events...disappear. Events are sent to Logstash via filebeat (running v 7.10.0). …

---

## [Elasticsearch 6.7.0 not working on windows 2008](https://discuss.elastic.co/t/elasticsearch-6-7-0-not-working-on-windows-2008/198616)

<div class="topic-metadata">

**Author:** [@amol\_sonawane1](https://discuss.elastic.co/u/amol_sonawane1)\
**Replies:** 7\
**Last updated:** [September 16, 2019, 9:21am UTC](https://discuss.elastic.co/t/elasticsearch-6-7-0-not-working-on-windows-2008/198616 "2019-09-16T09:21:00Z")

</div>

Hi, I have upgraded Elasticsearch from 5.2.2 to 6.7.0 version. After upgrading successfully, I am not able to start Elasticsearch on W2008 box. Giving below error. Caused by: java.io.IOException: Cannot run program "\\?…

---

## [Filebeats(5.40) keeps on recreating the indices after deletion](https://discuss.elastic.co/t/filebeats-5-40-keeps-on-recreating-the-indices-after-deletion/121986)

<div class="topic-metadata">

**Author:** [@dubul](https://discuss.elastic.co/u/dubul)\
**Replies:** 7\
**Last updated:** [March 6, 2018, 5:48am UTC](https://discuss.elastic.co/t/filebeats-5-40-keeps-on-recreating-the-indices-after-deletion/121986 "2018-03-06T05:48:51Z")

</div>

I have filebeats reading the log files on a remote server and shipping it to logstash on the same server. I have tried deleting the last 6 months old indices but I have noticed that indices are recreated on the elastic s…

---

## [How can limit access to dashboards?](https://discuss.elastic.co/t/how-can-limit-access-to-dashboards/110398)

<div class="topic-metadata">

**Author:** [@1862347ba9566e72a47d](https://discuss.elastic.co/u/1862347ba9566e72a47d)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 6:32pm UTC](https://discuss.elastic.co/t/how-can-limit-access-to-dashboards/110398 "2017-12-05T18:32:19Z")

</div>

Kibana version 6.0 I created a new user1 in kibana. Then assign role to use a user for Dashboard Only mode. User1 has by default accessed dashboard1, dashboard2, dashboard3. I want him to get access only to the dashb…

---

## [How to disable specific log output using log4j.properties?](https://discuss.elastic.co/t/how-to-disable-specific-log-output-using-log4j-properties/184787)

<div class="topic-metadata">

**Author:** [@bschaeffer](https://discuss.elastic.co/u/bschaeffer)\
**Replies:** 2\
**Last updated:** [June 10, 2019, 10:45pm UTC](https://discuss.elastic.co/t/how-to-disable-specific-log-output-using-log4j-properties/184787 "2019-06-10T22:45:26Z")

</div>

I am seeing a ton of org.logstash.beats.BeatHandler logs in logstash's debug out, but I would love to disable that so I can better debug our pipeline. How would I go about that in the log4j.properties file? Currently we…

---

## [Variable \[state\] is not defined](https://discuss.elastic.co/t/variable-state-is-not-defined/154728)

<div class="topic-metadata">

**Author:** [@robinsonmhj](https://discuss.elastic.co/u/robinsonmhj)\
**Replies:** 2\
**Last updated:** [October 30, 2018, 10:08pm UTC](https://discuss.elastic.co/t/variable-state-is-not-defined/154728 "2018-10-30T22:08:51Z")

</div>

Hi Guys, I was playing with elastic search "Scripted Metric Aggregation", I get the error like this { "error": { "root\_cause": \[ { "type": "script\_exception", "reason": "compile error", "script\_stack": \[ "state.…

---

## [Converting date format in logstash](https://discuss.elastic.co/t/converting-date-format-in-logstash/137026)

<div class="topic-metadata">

**Author:** [@Melvin\_Moses](https://discuss.elastic.co/u/Melvin_Moses)\
**Replies:** 2\
**Last updated:** [June 25, 2018, 4:54am UTC](https://discuss.elastic.co/t/converting-date-format-in-logstash/137026 "2018-06-25T04:54:56Z")

</div>

I have to extract a date from a log file, need to convert it to another date format and save it to Elasticsearch. My logstash code is like this filter { grok{ patterns\_dir =\> "./patterns" match =\> \[ "message", "%{pa…

---

## [Error: \[parsing\_exception\] Unexpected token VALUE\_STRING \[script\] in \[1\]., with { line=1 col=356 }](https://discuss.elastic.co/t/error-parsing-exception-unexpected-token-value-string-script-in-1-with-line-1-col-356/70333)

<div class="topic-metadata">

**Author:** [@mgz](https://discuss.elastic.co/u/mgz)\
**Replies:** 2\
**Last updated:** [January 3, 2017, 9:27pm UTC](https://discuss.elastic.co/t/error-parsing-exception-unexpected-token-value-string-script-in-1-with-line-1-col-356/70333 "2017-01-03T21:27:39Z")

</div>

Getting error message when used \_value in JSON input of Y axis. In Kibana4, it works fine though. Why?

---

## [\[discovery.zen \] \[Masters, Alicia\] master\_left , reason \[failed to ping, tried \[3\] times, each with maximum \[30s\] timeout\]](https://discuss.elastic.co/t/discovery-zen-masters-alicia-master-left-reason-failed-to-ping-tried-3-times-each-with-maximum-30s-timeout/13653)

<div class="topic-metadata">

**Author:** [@Wei\_Zhang](https://discuss.elastic.co/u/Wei_Zhang)\
**Replies:** 2\
**Last updated:** [September 18, 2013, 11:10pm UTC](https://discuss.elastic.co/t/discovery-zen-masters-alicia-master-left-reason-failed-to-ping-tried-3-times-each-with-maximum-30s-timeout/13653 "2013-09-18T23:10:51Z")

</div>

I got following error when I try to start a new elasticsearch install: \[2013-09-17 10:05:46,288\]\[INFO \]\[discovery.zen \] \[Masters, Alicia\] master\_left \[\[Him\]\[8wa0Y4rUS1KgPRGHQLGayw\]\[inet\[/10.67.93.32:930…

---

## [Generic solution for masking PII data in JSON payload](https://discuss.elastic.co/t/generic-solution-for-masking-pii-data-in-json-payload/303464)

<div class="topic-metadata">

**Author:** [@Hammad\_Ali](https://discuss.elastic.co/u/Hammad_Ali)\
**Replies:** 5\
**Last updated:** [May 16, 2022, 8:05am UTC](https://discuss.elastic.co/t/generic-solution-for-masking-pii-data-in-json-payload/303464 "2022-05-16T08:05:55Z")

</div>

Hello! Is there any generic solution to mask PII data in JSON payload, I know about mutate gsub but that doesn't seem like a generic solution. I am looking for something that filters out all of the fields and masks any …

---

## [Add large attachments from S3 to Elastic Search](https://discuss.elastic.co/t/add-large-attachments-from-s3-to-elastic-search/283452)

<div class="topic-metadata">

**Author:** [@Reghu\_Shanker](https://discuss.elastic.co/u/Reghu_Shanker)\
**Replies:** 5\
**Last updated:** [September 7, 2021, 3:37am UTC](https://discuss.elastic.co/t/add-large-attachments-from-s3-to-elastic-search/283452 "2021-09-07T03:37:42Z")

</div>

Hi, I have large pdf files which are located in AWS S3 which needs to be indexed and searchable. I want to upload these files to elastic search. The files need to be uploaded as single documents. How can I do this from…

---

## [Metricbeat, filebeat service failed to start after logstash, kibana servers was rebooted on v7.14](https://discuss.elastic.co/t/metricbeat-filebeat-service-failed-to-start-after-logstash-kibana-servers-was-rebooted-on-v7-14/287426)

<div class="topic-metadata">

**Author:** [@cool999](https://discuss.elastic.co/u/cool999)\
**Replies:** 8\
**Last updated:** [October 24, 2021, 4:19pm UTC](https://discuss.elastic.co/t/metricbeat-filebeat-service-failed-to-start-after-logstash-kibana-servers-was-rebooted-on-v7-14/287426 "2021-10-24T16:19:13Z")

</div>

Hi Team, There was activity to reboot the servers (beats, logstash servers etc.) for patching. I noticed after this, filebeat and metricbeat services were failed (they are enabled to start on reboot). However only hear…

---

## [Metricbeat 6.3.2 upgrade breaks?](https://discuss.elastic.co/t/metricbeat-6-3-2-upgrade-breaks/142241)

<div class="topic-metadata">

**Author:** [@arlen](https://discuss.elastic.co/u/arlen)\
**Replies:** 8\
**Last updated:** [February 28, 2019, 3:43pm UTC](https://discuss.elastic.co/t/metricbeat-6-3-2-upgrade-breaks/142241 "2019-02-28T15:43:58Z")

</div>

CentOS 7.5.1804 (from /etc/centos-release) ES 6.3.2 -- checked via curl Metricbeat 6.3.2 (from debug log) System module. (from JSON in debug log) Debug logs don't show a lot that seems helpful. But there's a constant…

---

## [Demande conseils ElasticSearch](https://discuss.elastic.co/t/demande-conseils-elasticsearch/84386)

<div class="topic-metadata">

**Author:** [@Sam67000](https://discuss.elastic.co/u/Sam67000)\
**Replies:** 8\
**Last updated:** [May 3, 2017, 4:47pm UTC](https://discuss.elastic.co/t/demande-conseils-elasticsearch/84386 "2017-05-03T16:47:44Z")

</div>

Bonjour à tous, Je suis actuellement chargé de monter la suite ELK qui serait en charge de traiter un nombre élevé de giga de log en temps réel. Pour cela j'ai à ma disposition 4 serveurs virtuels sur 2 sites différen…

---

## [Unable to index documents after around 20 million, Spark job fails because of NoNodesLeftException](https://discuss.elastic.co/t/unable-to-index-documents-after-around-20-million-spark-job-fails-because-of-nonodesleftexception/115518)

<div class="topic-metadata">

**Author:** [@Ravi\_Ranjan](https://discuss.elastic.co/u/Ravi_Ranjan)\
**Replies:** 1\
**Last updated:** [January 19, 2018, 6:05pm UTC](https://discuss.elastic.co/t/unable-to-index-documents-after-around-20-million-spark-job-fails-because-of-nonodesleftexception/115518 "2018-01-19T18:05:37Z")

</div>

Hi, I am indexing some 30 million records in Elastic using pyspark. I ran the code and was able to index some 20 million records post which i got the following error: 18/01/15 10:34:42 WARN TaskSetManager: Lost task 1…

---

## [Logstash 7.8 beats input with SSL throws error](https://discuss.elastic.co/t/logstash-7-8-beats-input-with-ssl-throws-error/243273)

<div class="topic-metadata">

**Author:** [@frankfoti](https://discuss.elastic.co/u/frankfoti)\
**Replies:** 3\
**Last updated:** [August 6, 2020, 11:55am UTC](https://discuss.elastic.co/t/logstash-7-8-beats-input-with-ssl-throws-error/243273 "2020-08-06T11:55:59Z")

</div>

I added the SSL to the beats input and now the pipline throws an error. Cert and key are verified. See below 1) Config, 2) Cert and Key verify and 3) error in pipeline log. input { beats { port =\> 5046 ssl =\>…

---

## [Suricata and Kibana in Ubuntu 18.04](https://discuss.elastic.co/t/suricata-and-kibana-in-ubuntu-18-04/235438)

<div class="topic-metadata">

**Author:** [@wahyu\_wir](https://discuss.elastic.co/u/wahyu_wir)\
**Replies:** 6\
**Last updated:** [June 27, 2020, 11:29am UTC](https://discuss.elastic.co/t/suricata-and-kibana-in-ubuntu-18-04/235438 "2020-06-27T11:29:47Z")

</div>

how can I use ELK on the suricata that I installed on Ubuntu 18.04? I have followed the link: https://www.google.com/amp/s/logz.io/blog/network-security-monitoring/amp/ but after the kibana is opened, it appears that i…

---

## [Querying Nested Datatype](https://discuss.elastic.co/t/querying-nested-datatype/116408)

<div class="topic-metadata">

**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\
**Replies:** 6\
**Last updated:** [January 27, 2018, 5:56pm UTC](https://discuss.elastic.co/t/querying-nested-datatype/116408 "2018-01-27T17:56:13Z")

</div>

If I have following index mapping for nested type, can I filter on two different fields in the same document? Mapping: { "mappings": { "records": { "properties": { "record": { "type": "nes…

---

## [How to make ElasticSearch return results in sorted time order](https://discuss.elastic.co/t/how-to-make-elasticsearch-return-results-in-sorted-time-order/121129)

<div class="topic-metadata">

**Author:** [@aybhave](https://discuss.elastic.co/u/aybhave)\
**Replies:** 1\
**Last updated:** [March 2, 2018, 10:16pm UTC](https://discuss.elastic.co/t/how-to-make-elasticsearch-return-results-in-sorted-time-order/121129 "2018-03-02T22:16:40Z")

</div>

Hello, I have an index whose documents have a "timestamp" field. Each document represents a syslog line and the timestamp corresponds to the timestamp of the line. Now in my system, sometimes the log lines are printed s…

---

## [New Cryptocli release with Elasticsearch support](https://discuss.elastic.co/t/new-cryptocli-release-with-elasticsearch-support/185970)

<div class="topic-metadata">

**Author:** [@tehmoon](https://discuss.elastic.co/u/tehmoon)\
**Replies:** 2\
**Last updated:** [June 17, 2019, 11:07am UTC](https://discuss.elastic.co/t/new-cryptocli-release-with-elasticsearch-support/185970 "2019-06-17T11:07:07Z")

</div>

Hello! 2 years ago, I build a project which gives the possibility to build a data pipeline really easily by chaining modules together. Since I love Elasticsearch so much and needed some features to manipulate/hydrate d…

---

## [URL monitoring in Kibana](https://discuss.elastic.co/t/url-monitoring-in-kibana/179314)

<div class="topic-metadata">

**Author:** [@ksunil](https://discuss.elastic.co/u/ksunil)\
**Replies:** 2\
**Last updated:** [May 15, 2019, 3:34pm UTC](https://discuss.elastic.co/t/url-monitoring-in-kibana/179314 "2019-05-15T15:34:05Z")

</div>

Hi, I got a requirement to monitor URL for example http://testabc.com:8080/dcf . In general the url requires username and password to go through. But is there any way to get status code=200 without passing username an…

---

## [Query fields in multimatch, highlight them, but exclude them from results](https://discuss.elastic.co/t/query-fields-in-multimatch-highlight-them-but-exclude-them-from-results/135002)

<div class="topic-metadata">

**Author:** [@hacker\_21](https://discuss.elastic.co/u/hacker_21)\
**Replies:** 2\
**Last updated:** [June 16, 2018, 6:20am UTC](https://discuss.elastic.co/t/query-fields-in-multimatch-highlight-them-but-exclude-them-from-results/135002 "2018-06-16T06:20:20Z")

</div>

hi, I have a field called "pages" which is an array which can store up to 1,000 plain-text web pages. This is useful while querying to identify relevant documents. However, the 1K page array isn't actually displayed to…

---

## [Elastic query for multiple level (more than 3) parent child relation](https://discuss.elastic.co/t/elastic-query-for-multiple-level-more-than-3-parent-child-relation/51644)

<div class="topic-metadata">

**Author:** [@Mobasher-NetLinks](https://discuss.elastic.co/u/Mobasher-NetLinks)\
**Replies:** 2\
**Last updated:** [June 4, 2016, 4:40am UTC](https://discuss.elastic.co/t/elastic-query-for-multiple-level-more-than-3-parent-child-relation/51644 "2016-06-04T04:40:23Z")

</div>

Suppose I have the following structure: "audit\_ssn" : { "properties" : { "session\_id" : { "type" : "string" }, "user":{ "type" : "nested", "properties" : { "id"…

---

## [Filebeat running on ECK cannot create an index](https://discuss.elastic.co/t/filebeat-running-on-eck-cannot-create-an-index/316464)

<div class="topic-metadata">

**Author:** [@cloudmatt](https://discuss.elastic.co/u/cloudmatt)\
**Replies:** 3\
**Last updated:** [November 21, 2022, 1:34pm UTC](https://discuss.elastic.co/t/filebeat-running-on-eck-cannot-create-an-index/316464 "2022-11-21T13:34:10Z")

</div>

I'm trying to wrap my head around running ECK and using filebeat. I've successfully deployed filebeat and I see it grabbing logs from my GCP pub/sub topic but it keeps dropping them because of the following error: Priva…

---

## [Kibana PUT request timing out](https://discuss.elastic.co/t/kibana-put-request-timing-out/250198)

<div class="topic-metadata">

**Author:** [@awstrain34](https://discuss.elastic.co/u/awstrain34)\
**Replies:** 3\
**Last updated:** [September 28, 2020, 6:02pm UTC](https://discuss.elastic.co/t/kibana-put-request-timing-out/250198 "2020-09-28T18:02:56Z")

</div>

Hello All, I am running an Elastic search and Kibana 6.1.1 on Kubernetes with docker containers. I have configured s3-repository plugin for backup. I am trying to create a backup from Kibana of indice with size 5gb: …

---

## [Using GKE workflow identity to snapshot and restore elasticsearch data](https://discuss.elastic.co/t/using-gke-workflow-identity-to-snapshot-and-restore-elasticsearch-data/223156)

<div class="topic-metadata">

**Author:** [@Ben\_Eustace](https://discuss.elastic.co/u/Ben_Eustace)\
**Replies:** 3\
**Last updated:** [July 17, 2020, 12:28pm UTC](https://discuss.elastic.co/t/using-gke-workflow-identity-to-snapshot-and-restore-elasticsearch-data/223156 "2020-07-17T12:28:05Z")

</div>

We currently have a GKE cluster and the elastic cloud on kubernetes operator deployed and running. Our elastic resources look as follows: apiVersion: elasticsearch.k8s.elastic.co/v1 kind: Elasticsearch metadata: name:…

---

## [Error: Unable to install kibana-plugin](https://discuss.elastic.co/t/error-unable-to-install-kibana-plugin/223943)

<div class="topic-metadata">

**Author:** [@Surendar\_Niji](https://discuss.elastic.co/u/Surendar_Niji)\
**Replies:** 3\
**Last updated:** [March 17, 2020, 5:08pm UTC](https://discuss.elastic.co/t/error-unable-to-install-kibana-plugin/223943 "2020-03-17T17:08:16Z")

</div>

Kibana and elasticsearch are installed same server but through linux 64-Bit. Home path of kibana is /data/kibana When i try to install a kibana-plugin it gives below error at the end Plugin installation was unsuccessf…

---

## [ELb logs from s3 to ELK server](https://discuss.elastic.co/t/elb-logs-from-s3-to-elk-server/133168)

<div class="topic-metadata">

**Author:** [@Suresh\_Pal](https://discuss.elastic.co/u/Suresh_Pal)\
**Replies:** 3\
**Last updated:** [May 29, 2018, 7:45am UTC](https://discuss.elastic.co/t/elb-logs-from-s3-to-elk-server/133168 "2018-05-29T07:45:21Z")

</div>

I'm trying to ship my elb logs from the s3 bucket to ELK server. I'm getting following error /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/s3\_elb\_logs.conf WARNING: Could not find logstash.yml which is typic…

---

## [Lucene dependencies in ElasticSearch High Level Client](https://discuss.elastic.co/t/lucene-dependencies-in-elasticsearch-high-level-client/107606)

<div class="topic-metadata">

**Author:** [@Victor\_Luiz\_Guimarae](https://discuss.elastic.co/u/Victor_Luiz_Guimarae)\
**Replies:** 4\
**Last updated:** [November 15, 2017, 12:21pm UTC](https://discuss.elastic.co/t/lucene-dependencies-in-elasticsearch-high-level-client/107606 "2017-11-15T12:21:12Z")

</div>

Hello, We are migrating from Solr to ElasticSearch. I using the ElasticSearch High Level Client and ElasticSearch in the 5.6.2 version. The High Level Client are using Lucene 6.6.1 and my already exists projects are us…

---

## [Does elasticsearch-hadoop on spark has data locality on write?](https://discuss.elastic.co/t/does-elasticsearch-hadoop-on-spark-has-data-locality-on-write/97112)

<div class="topic-metadata">

**Author:** [@ov7a](https://discuss.elastic.co/u/ov7a)\
**Replies:** 4\
**Last updated:** [August 15, 2017, 5:38pm UTC](https://discuss.elastic.co/t/does-elasticsearch-hadoop-on-spark-has-data-locality-on-write/97112 "2017-08-15T17:38:41Z")

</div>

Let’s suppose we have a spark cluster with elasticsearch on each node. We’ve created a rdd with documents somehow and want to write them to es. Will the documents be written locally, i.e. if a partition is on node1, al…

---

## [Schedule not working correctly anymore](https://discuss.elastic.co/t/schedule-not-working-correctly-anymore/91238)

<div class="topic-metadata">

**Author:** [@dosera](https://discuss.elastic.co/u/dosera)\
**Replies:** 4\
**Last updated:** [July 3, 2017, 8:23am UTC](https://discuss.elastic.co/t/schedule-not-working-correctly-anymore/91238 "2017-07-03T08:23:22Z")

</div>

Hello, after the most recent update of heartbeat (5.2.0 to 5.4.2), heartbeat apparently sends more than one event per minute, even though it is defined to send one per minute. The last few months, we got 1440 (sometime…

---

## [ElasticSearch 2.1.1 RAM Issue](https://discuss.elastic.co/t/elasticsearch-2-1-1-ram-issue/48379)

<div class="topic-metadata">

**Author:** [@nkanchas](https://discuss.elastic.co/u/nkanchas)\
**Replies:** 4\
**Last updated:** [May 3, 2016, 4:03pm UTC](https://discuss.elastic.co/t/elasticsearch-2-1-1-ram-issue/48379 "2016-05-03T16:03:43Z")

</div>

Hi I have strange issue with ES RAM. free -m shows less RAM but KOPF plugin says good free RAM. Unable to figure out how to debug. ES Version = 2.1.1 - Machine has 8 GB RAM alloted ....Java xmx has 4GB configured. …

---

## [When is the reset \_cat/thread\_pool statistics?](https://discuss.elastic.co/t/when-is-the-reset--cat-thread-pool-statistics/2757)

<div class="topic-metadata">

**Author:** [@happyprg](https://discuss.elastic.co/u/happyprg)\
**Replies:** 4\
**Last updated:** [June 22, 2015, 2:45pm UTC](https://discuss.elastic.co/t/when-is-the-reset--cat-thread-pool-statistics/2757 "2015-06-22T14:45:42Z")

</div>

hello^^ i'm using ES for huge bulk insert job. after inserting. i want to know that how many query was rejected. so, i am using now the following query. curl '/\_cat/thread\_pool?v&h=id,host,bulk.active,bulk.queue…

---

## [Elastic Community Conference, Feb 26+27 2021 - CfP open now!](https://discuss.elastic.co/t/elastic-community-conference-feb-26-27-2021-cfp-open-now/259211)

<div class="topic-metadata">

**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Replies:** 0\
**Last updated:** [December 21, 2020, 3:58am UTC](https://discuss.elastic.co/t/elastic-community-conference-feb-26-27-2021-cfp-open-now/259211 "2020-12-21T03:58:33Z")

</div>

We're super excited to announce our first global Elastic Community Conference (ElasticCC in short), is a free technical conference from the community for the community. Open to developers, practitioners, customers, and p…

---

## [Elasticsearch index를 물리적으로 다른 서버 Elastcisearch로 복사를 어떻게 해야 할까요?](https://discuss.elastic.co/t/elasticsearch-index-elastcisearch/231241)

<div class="topic-metadata">

**Author:** [@e\_dd](https://discuss.elastic.co/u/e_dd)\
**Replies:** 1\
**Last updated:** [May 8, 2020, 12:20am UTC](https://discuss.elastic.co/t/elasticsearch-index-elastcisearch/231241 "2020-05-08T00:20:58Z")

</div>

안녕하세요. 기 구축된 ELK에서 분석을 위해 물리적으로 다른 서버에 Elasticsearch를 설치하고 기존에 index에 내용중 필요한것만 가져오려고 합니다. 어떻게 방법으로 진행해야 할까요? 해당 작업시 기존에 구축된 Elastcisearch에 부하가 많이 걸릴까요? 감사합니다.

---

## [How to know that logstash has finished processing all its input](https://discuss.elastic.co/t/how-to-know-that-logstash-has-finished-processing-all-its-input/187603)

<div class="topic-metadata">

**Author:** [@Stuart\_Moore](https://discuss.elastic.co/u/Stuart_Moore)\
**Replies:** 1\
**Last updated:** [July 2, 2019, 1:14pm UTC](https://discuss.elastic.co/t/how-to-know-that-logstash-has-finished-processing-all-its-input/187603 "2019-07-02T13:14:33Z")

</div>

I have a relatively complicated logstash pipeline setup, with some pipelines feeding into others, splitting events, making http calls to external services, and sometimes feeding an event back into the pipeline it came fr…

---

## [Nodejs Agent not instrumenting MongoDB calls](https://discuss.elastic.co/t/nodejs-agent-not-instrumenting-mongodb-calls/120417)

<div class="topic-metadata">

**Author:** [@kishoreacesurf](https://discuss.elastic.co/u/kishoreacesurf)\
**Replies:** 7\
**Last updated:** [February 21, 2018, 3:03pm UTC](https://discuss.elastic.co/t/nodejs-agent-not-instrumenting-mongodb-calls/120417 "2018-02-21T15:03:16Z")

</div>

Nodejs Express Agent is not instrumenting mongoDB calls

---

## [Install plugin using gem. GemNotFound](https://discuss.elastic.co/t/install-plugin-using-gem-gemnotfound/116123)

<div class="topic-metadata">

**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\
**Replies:** 1\
**Last updated:** [January 19, 2018, 10:09am UTC](https://discuss.elastic.co/t/install-plugin-using-gem-gemnotfound/116123 "2018-01-19T10:09:30Z")

</div>

Hi, I'm using logstash 5.6.5 on Centos7 and I need to use elasticsearch filter so I'm trying to install this plugin. If I try the command l logstash-plugin install elasticsearch-filter I receive the warning to chec…

---

## [Logstash elasticsearch output, parent/child](https://discuss.elastic.co/t/logstash-elasticsearch-output-parent-child/47667)

<div class="topic-metadata">

**Author:** [@raleel](https://discuss.elastic.co/u/raleel)\
**Replies:** 1\
**Last updated:** [May 6, 2016, 5:33pm UTC](https://discuss.elastic.co/t/logstash-elasticsearch-output-parent-child/47667 "2016-05-06T17:33:32Z")

</div>

It appears to me that the elasticsearch output module is not properly passing at least the parent parameter along with it. I'm not sure why. The document\_id and parent parameters are in the data, and confirmed to be cons…

---

## [Can't specify parent if no parent field has been configured](https://discuss.elastic.co/t/cant-specify-parent-if-no-parent-field-has-been-configured/36741)

<div class="topic-metadata">

**Author:** [@Ivan\_Ghisleni](https://discuss.elastic.co/u/Ivan_Ghisleni)\
**Replies:** 0\
**Last updated:** [December 9, 2015, 1:15pm UTC](https://discuss.elastic.co/t/cant-specify-parent-if-no-parent-field-has-been-configured/36741 "2015-12-09T13:15:25Z")

</div>

Hi to all I have the following problem with this example suggested by the book "ElastiSearch Cookbook" in my ElasitcSearch 2.1 The error is: Can't specify parent if no parent field has been configured what's wrong? …

---

## [Delete or update document without document\_id](https://discuss.elastic.co/t/delete-or-update-document-without-document-id/267375)

<div class="topic-metadata">

**Author:** [@lele15](https://discuss.elastic.co/u/lele15)\
**Replies:** 5\
**Last updated:** [March 16, 2021, 4:18pm UTC](https://discuss.elastic.co/t/delete-or-update-document-without-document-id/267375 "2021-03-16T16:18:25Z")

</div>

Hi, i'm new on ES, i'am using logstash and csv to update or delete values into ES. I want to delete or update document based on different field not only with document\_id like this: input { stdin{} } filter { csv …

---

## [Logstash parsing not consistant](https://discuss.elastic.co/t/logstash-parsing-not-consistant/31732)

<div class="topic-metadata">

**Author:** [@l1carter](https://discuss.elastic.co/u/l1carter)\
**Replies:** 5\
**Last updated:** [October 8, 2015, 7:46pm UTC](https://discuss.elastic.co/t/logstash-parsing-not-consistant/31732 "2015-10-08T19:46:15Z")

</div>

New here and new to ELK. I'm to a point however that I think it may be easier to ask as someone may have seen this or know the issue... two identical logs come into the system (file input type)... one line matches my fil…

---

## [Getting docID (ScoreDoc.doc of lucene) in SearchHit](https://discuss.elastic.co/t/getting-docid-scoredoc-doc-of-lucene-in-searchhit/14015)

<div class="topic-metadata">

**Author:** [@Chetana](https://discuss.elastic.co/u/Chetana)\
**Replies:** 5\
**Last updated:** [October 31, 2013, 11:37am UTC](https://discuss.elastic.co/t/getting-docid-scoredoc-doc-of-lucene-in-searchhit/14015 "2013-10-31T11:37:32Z")

</div>

I need to get the result for reader.getTermVector(docId, "field"). How can I get the document number which is ScoreDoc.doc in Lucene search result? Is it possible to get that value from SearchHit in ElasticSearch T…

[Previous page](https://discuss.elastic.co/top.md?page=970&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=972&per_page=50&period=all)
