# Top

**URL:** https://discuss.elastic.co/top.md?page=980&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 981

---

## [Formal spec for Query DSL](https://discuss.elastic.co/t/formal-spec-for-query-dsl/2820)

<div class="topic-metadata">

**Author:** [@Clinton\_Gormley](https://discuss.elastic.co/u/Clinton_Gormley)\
**Replies:** 4\
**Last updated:** [August 7, 2015, 8:46am UTC](https://discuss.elastic.co/t/formal-spec-for-query-dsl/2820 "2015-08-07T08:46:31Z")

</div>

Hiya I'm trying to formalise the spec for the Query DSL used by ElasticSearch, both for my own understanding, and for making the Perl API more aware. The current docs assume a working knowledge of Lucene, which I …

---

## [Unable to allocate .security index](https://discuss.elastic.co/t/unable-to-allocate-security-index/173234)

<div class="topic-metadata">

**Author:** [@Jathin](https://discuss.elastic.co/u/Jathin)\
**Replies:** 3\
**Last updated:** [March 21, 2019, 1:22pm UTC](https://discuss.elastic.co/t/unable-to-allocate-security-index/173234 "2019-03-21T13:22:20Z")

</div>

I have a alert on Kibana monitoring index stating a node got removed and got added later and I see the cluster in yellow state. No running GET \_cluster/allocation/explain i get .security index is not allocated as all no…

---

## [Watcher to delete index](https://discuss.elastic.co/t/watcher-to-delete-index/110333)

<div class="topic-metadata">

**Author:** [@Mads\_Frisk\_Sorensen](https://discuss.elastic.co/u/Mads_Frisk_Sorensen)\
**Replies:** 3\
**Last updated:** [December 5, 2017, 9:19pm UTC](https://discuss.elastic.co/t/watcher-to-delete-index/110333 "2017-12-05T21:19:32Z")

</div>

Hi I have a watcher, that should delete my logstash indices after 31 days. I'm having trouble with the transform part of the watcher. In the 'source' line I would like it to find the date minus 31 days. I have the fo…

---

## [How to remove nested fields in logstash 5.4](https://discuss.elastic.co/t/how-to-remove-nested-fields-in-logstash-5-4/102190)

<div class="topic-metadata">

**Author:** [@elasticuser1](https://discuss.elastic.co/u/elasticuser1)\
**Replies:** 3\
**Last updated:** [October 6, 2017, 5:05pm UTC](https://discuss.elastic.co/t/how-to-remove-nested-fields-in-logstash-5-4/102190 "2017-10-06T17:05:43Z")

</div>

Hi, I have below json. I want to remove all paths.\*.get.parameters.default fields. Could not find the right solution. Please advise. Thank you.

---

## [Kibana with Shield SSL](https://discuss.elastic.co/t/kibana-with-shield-ssl/62218)

<div class="topic-metadata">

**Author:** [@imHarshj](https://discuss.elastic.co/u/imHarshj)\
**Replies:** 3\
**Last updated:** [October 5, 2016, 2:36pm UTC](https://discuss.elastic.co/t/kibana-with-shield-ssl/62218 "2016-10-05T14:36:44Z")

</div>

Hello, Trying to enable Kibana to work with Shield. I'm getting this error in the log: FATAL { \[Error: EACCES: permission denied, open '/etc/.../file.key Similar to this thread: Using Shield 4.6 Appreciate the help…

---

## [Top hits per type of each day](https://discuss.elastic.co/t/top-hits-per-type-of-each-day/206299)

<div class="topic-metadata">

**Author:** [@rahul\_saini](https://discuss.elastic.co/u/rahul_saini)\
**Replies:** 1\
**Last updated:** [November 8, 2019, 1:38pm UTC](https://discuss.elastic.co/t/top-hits-per-type-of-each-day/206299 "2019-11-08T13:38:11Z")

</div>

Hello, I've an application with two modules - frontend & backend. Both are getting scanned for defects multiple times a day. We're collecting these results and pushing them over Elasticsearch, so we can see the defect…

---

## [How to skip SSL validation for creating S3 repository?](https://discuss.elastic.co/t/how-to-skip-ssl-validation-for-creating-s3-repository/165797)

<div class="topic-metadata">

**Author:** [@iamadeveloper](https://discuss.elastic.co/u/iamadeveloper)\
**Replies:** 1\
**Last updated:** [January 28, 2019, 11:57pm UTC](https://discuss.elastic.co/t/how-to-skip-ssl-validation-for-creating-s3-repository/165797 "2019-01-28T23:57:12Z")

</div>

I am trying to create S3 repository. But Certificate to S3 endpoint is invalid. How do I skip SSL verification? curl -X PUT "172.16.2.54:9200/\_snapshot/my\_s3\_repository?pretty" -H 'Content-Type: application/json' -…

---

## [Logstash rabbitmq\_input connection recovery fails](https://discuss.elastic.co/t/logstash-rabbitmq-input-connection-recovery-fails/247554)

<div class="topic-metadata">

**Author:** [@Helena\_Ji](https://discuss.elastic.co/u/Helena_Ji)\
**Replies:** 2\
**Last updated:** [September 10, 2020, 4:00pm UTC](https://discuss.elastic.co/t/logstash-rabbitmq-input-connection-recovery-fails/247554 "2020-09-10T16:00:52Z")

</div>

I am facing some issue that logstash does not want to reconnect to the rabbitMQ after losing the connection somehow. I am using two logstash instances on two different VMs, these two logstash instances listen to the sam…

---

## [Create table visualization using regex matching groups](https://discuss.elastic.co/t/create-table-visualization-using-regex-matching-groups/208125)

<div class="topic-metadata">

**Author:** [@sre3219](https://discuss.elastic.co/u/sre3219)\
**Replies:** 2\
**Last updated:** [November 18, 2019, 6:19pm UTC](https://discuss.elastic.co/t/create-table-visualization-using-regex-matching-groups/208125 "2019-11-18T18:19:36Z")

</div>

Hello, I've spent a lot of time searching for an answer to this question, but have not found one. I'm writing Kibana queries to create table summaries of of logs. The tl;dr is that I want to write a group-match regex fo…

---

## [Privileges for built-in roles](https://discuss.elastic.co/t/privileges-for-built-in-roles/103792)

<div class="topic-metadata">

**Author:** [@jagrutsharma](https://discuss.elastic.co/u/jagrutsharma)\
**Replies:** 2\
**Last updated:** [October 13, 2017, 6:36pm UTC](https://discuss.elastic.co/t/privileges-for-built-in-roles/103792 "2017-10-13T18:36:44Z")

</div>

The reference for privileges is here: https://www.elastic.co/guide/en/x-pack/5.4/security-privileges.html Built-in roles have privileges that are not in the reference list. For example, here are two built-in roles. The…

---

## [Change Logo](https://discuss.elastic.co/t/change-logo/44581)

<div class="topic-metadata">

**Author:** [@Lucky](https://discuss.elastic.co/u/Lucky)\
**Replies:** 2\
**Last updated:** [August 2, 2016, 3:32am UTC](https://discuss.elastic.co/t/change-logo/44581 "2016-08-02T03:32:07Z")

</div>

Hi, Trying to change Kibana 4.4.1 Logo but was not successful. i tried to place the logo in the src/ui/public/images and delete the .svg file and also tried installing a plugin but was not successful. Any help!!!

---

## [Can we use Chinese character in wildcard query](https://discuss.elastic.co/t/can-we-use-chinese-character-in-wildcard-query/14038)

<div class="topic-metadata">

**Author:** [@mohit\_Kumar](https://discuss.elastic.co/u/mohit_Kumar)\
**Replies:** 2\
**Last updated:** [October 21, 2013, 4:57pm UTC](https://discuss.elastic.co/t/can-we-use-chinese-character-in-wildcard-query/14038 "2013-10-21T16:57:55Z")

</div>

Hi folks, I am trying to get data from a Chinese keyword, but it always showing Zero hits. Elasticsearch query : \*{"query":{"wildcard" : { "text" : " \*\*好不\* " }}}\* I am using java program to fire this query. I…

---

## [Syslog - logs contain dynamic fields(parameters) based on event type, how to index?](https://discuss.elastic.co/t/syslog-logs-contain-dynamic-fields-parameters-based-on-event-type-how-to-index/236144)

<div class="topic-metadata">

**Author:** [@Ilya\_Geller](https://discuss.elastic.co/u/Ilya_Geller)\
**Replies:** 6\
**Last updated:** [June 8, 2020, 7:42pm UTC](https://discuss.elastic.co/t/syslog-logs-contain-dynamic-fields-parameters-based-on-event-type-how-to-index/236144 "2020-06-08T19:42:10Z")

</div>

Hi, I am trying to write a syslog collector for to store logs from a Cisco CUCM into elasticsearch. Cisco CUCM sends audit logs and alarms as syslog to my logstash server for different system and application events. T…

---

## [ECE Elasticsearch Keystore](https://discuss.elastic.co/t/ece-elasticsearch-keystore/215901)

<div class="topic-metadata">

**Author:** [@chadhanson](https://discuss.elastic.co/u/chadhanson)\
**Replies:** 6\
**Last updated:** [January 21, 2020, 5:09pm UTC](https://discuss.elastic.co/t/ece-elasticsearch-keystore/215901 "2020-01-21T17:09:18Z")

</div>

I am trying to use the elasticsearch keystore feature in ECE however I am having a few issues. First issue, when simply adding a simple keystore key value pair it will cause instance boot looping on all future stack cha…

---

## [Logstash.yml confilct when configuring modules in it. Using the official elastic logstash docker image](https://discuss.elastic.co/t/logstash-yml-confilct-when-configuring-modules-in-it-using-the-official-elastic-logstash-docker-image/168455)

<div class="topic-metadata">

**Author:** [@solstarz](https://discuss.elastic.co/u/solstarz)\
**Replies:** 6\
**Last updated:** [February 15, 2019, 9:50am UTC](https://discuss.elastic.co/t/logstash-yml-confilct-when-configuring-modules-in-it-using-the-official-elastic-logstash-docker-image/168455 "2019-02-15T09:50:13Z")

</div>

Hi, I have configured the azure module in logstash.yml, but after the container starts im receiving this error: ERROR: Settings 'path.config' (-f) or 'config.string' (-e) can't be used in conjunction with (--modules) o…

---

## [Node to node encryption works, but NOT the HTTP client one](https://discuss.elastic.co/t/node-to-node-encryption-works-but-not-the-http-client-one/129852)

<div class="topic-metadata">

**Author:** [@mlemartien](https://discuss.elastic.co/u/mlemartien)\
**Replies:** 2\
**Last updated:** [April 27, 2018, 3:54pm UTC](https://discuss.elastic.co/t/node-to-node-encryption-works-but-not-the-http-client-one/129852 "2018-04-27T15:54:57Z")

</div>

Hi there, I have been trying to encrypt communication between the cluster nodes (this works like a charm), the browser and Kibana (works well too) and finally for the HTTP Client traffic. This latter does NOT work. Wha…

---

## [What's the difference between Id's query and Term Query when finding documents by “\_id”?](https://discuss.elastic.co/t/whats-the-difference-between-ids-query-and-term-query-when-finding-documents-by-id/279523)

<div class="topic-metadata">

**Author:** [@Nishikant\_Tayade](https://discuss.elastic.co/u/Nishikant_Tayade)\
**Replies:** 2\
**Last updated:** [July 24, 2021, 7:11am UTC](https://discuss.elastic.co/t/whats-the-difference-between-ids-query-and-term-query-when-finding-documents-by-id/279523 "2021-07-24T07:11:39Z")

</div>

I want to get document by "\_id", I have 3 choices: GET document by "\_id" GET order/\_doc/001 Use Id's Query, GET order/\_search { "query": { "ids" : { "values" : \["001"\] } } } Though Id's query takes array of Id's but I …

---

## [Understanding node.max\_local\_storage\_nodes?](https://discuss.elastic.co/t/understanding-node-max-local-storage-nodes/332682)

<div class="topic-metadata">

**Author:** [@lakh](https://discuss.elastic.co/u/lakh)\
**Replies:** 1\
**Last updated:** [May 8, 2023, 2:51am UTC](https://discuss.elastic.co/t/understanding-node-max-local-storage-nodes/332682 "2023-05-08T02:51:05Z")

</div>

Hi, my setup is that I have multiple people running their own docker containers on different machines that have access to shared storage. I've put the elasticsearch- folder in that shared location (so the /data/index fol…

---

## [Invalid zlib data](https://discuss.elastic.co/t/invalid-zlib-data/279823)

<div class="topic-metadata">

**Author:** [@fidsamurai](https://discuss.elastic.co/u/fidsamurai)\
**Replies:** 1\
**Last updated:** [July 29, 2021, 4:26am UTC](https://discuss.elastic.co/t/invalid-zlib-data/279823 "2021-07-29T04:26:26Z")

</div>

Hi Team, Getting the following error in Discover in Kibana 7.13.4 - Error: invalid zlib data at search\_interceptor\_EnhancedSearchInterceptor.handleSearchError (https://new-kibana.viapplogs.net/41022/bundles/plu…

---

## [Message not fully read (response) for request AND incompatible wire format](https://discuss.elastic.co/t/message-not-fully-read-response-for-request-and-incompatible-wire-format/266209)

<div class="topic-metadata">

**Author:** [@TheHunter1](https://discuss.elastic.co/u/TheHunter1)\
**Replies:** 7\
**Last updated:** [March 5, 2021, 8:29am UTC](https://discuss.elastic.co/t/message-not-fully-read-response-for-request-and-incompatible-wire-format/266209 "2021-03-05T08:29:53Z")

</div>

Hello, I am trying ELasticsearch from code source (8.0.0) , and I am getting these warninigs: java.lang.IllegalStateException: Message not fully read (response) for requestId \[542\], handler \[org.elasticsearch.transpor…

---

## [Accessing nested array of objects in elastic search throws null pointer exception using painless script](https://discuss.elastic.co/t/accessing-nested-array-of-objects-in-elastic-search-throws-null-pointer-exception-using-painless-script/200599)

<div class="topic-metadata">

**Author:** [@manish\_kakoti](https://discuss.elastic.co/u/manish_kakoti)\
**Replies:** 1\
**Last updated:** [September 25, 2019, 10:28am UTC](https://discuss.elastic.co/t/accessing-nested-array-of-objects-in-elastic-search-throws-null-pointer-exception-using-painless-script/200599 "2019-09-25T10:28:54Z")

</div>

Here is the schema: "mappings": { "\_doc": { "properties": { "createdAt": { "type": "date" }, "files": { "type": "nested", "properties": { "name…

---

## [Java Client API to check the size of bulk queue](https://discuss.elastic.co/t/java-client-api-to-check-the-size-of-bulk-queue/188520)

<div class="topic-metadata">

**Author:** [@Prashant\_Rana](https://discuss.elastic.co/u/Prashant_Rana)\
**Replies:** 7\
**Last updated:** [July 3, 2019, 1:46pm UTC](https://discuss.elastic.co/t/java-client-api-to-check-the-size-of-bulk-queue/188520 "2019-07-03T13:46:25Z")

</div>

Hi, I am getting EsRejectedExecutionException after sending the logs to the bulkprocessor. I know the queue size defaults to 200. Is there any Java API with which I can check the current queue size and handle the addit…

---

## [Joda problem!](https://discuss.elastic.co/t/joda-problem/20330)

<div class="topic-metadata">

**Author:** [@kodo65](https://discuss.elastic.co/u/kodo65)\
**Replies:** 7\
**Last updated:** [October 20, 2014, 9:08am UTC](https://discuss.elastic.co/t/joda-problem/20330 "2014-10-20T09:08:52Z")

</div>

Hi! I've been struggling with two date formats. I'll give you a sample and the corresponding date format I've used: 1. "Oct 20, 2014 8:42:41 AM" : MMM d YYYY hh:mm:ss aa 2. "Mon Oct 20 06:42:41 +0000 2014" : EEE…

---

## [Upgrade from 7.17.1 to 8.5.3 failed](https://discuss.elastic.co/t/upgrade-from-7-17-1-to-8-5-3-failed/321946)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 8\
**Last updated:** [December 24, 2022, 11:03pm UTC](https://discuss.elastic.co/t/upgrade-from-7-17-1-to-8-5-3-failed/321946 "2022-12-24T23:03:01Z")

</div>

here is error. java.lang.IllegalStateException: cannot upgrade node because incompatible indices created with version \[6.5.4\] exist, while the minimum compatible index version is \[7.0.0\]. Upgrade your older indices by …

---

## [No recovered \[0\] indices into cluster\_state](https://discuss.elastic.co/t/no-recovered-0-indices-into-cluster-state/308369)

<div class="topic-metadata">

**Author:** [@jshamili](https://discuss.elastic.co/u/jshamili)\
**Replies:** 3\
**Last updated:** [June 29, 2022, 9:06pm UTC](https://discuss.elastic.co/t/no-recovered-0-indices-into-cluster-state/308369 "2022-06-29T21:06:34Z")

</div>

Can anyone help: This is a prod environment and fresh install. No issue in Dev env its totally working Es version: "name" : "cnfdoqprels01", "cluster\_name" : "bitbucketES", "cluster\_uuid" : "gdT4F-bnS0ifFam9wSOWEQ", …

---

## [Fields are unknown in de discovery tab kibana and unable to make visualization of field](https://discuss.elastic.co/t/fields-are-unknown-in-de-discovery-tab-kibana-and-unable-to-make-visualization-of-field/279880)

<div class="topic-metadata">

**Author:** [@gregorysanders](https://discuss.elastic.co/u/gregorysanders)\
**Replies:** 3\
**Last updated:** [August 2, 2021, 5:37am UTC](https://discuss.elastic.co/t/fields-are-unknown-in-de-discovery-tab-kibana-and-unable-to-make-visualization-of-field/279880 "2021-08-02T05:37:10Z")

</div>

HI everyone, I am unable to make visualizations of certain fields in my index. In the discovery tab, some fields are unknown. I already tried to refresh the index pattern multiple times but this does not solve the prob…

---

## [Encrypt HTTP Client](https://discuss.elastic.co/t/encrypt-http-client/273245)

<div class="topic-metadata">

**Author:** [@NareshReddy](https://discuss.elastic.co/u/NareshReddy)\
**Replies:** 3\
**Last updated:** [May 19, 2021, 11:54am UTC](https://discuss.elastic.co/t/encrypt-http-client/273245 "2021-05-19T11:54:40Z")

</div>

When updating the certificate using the following commands "elasticsearch-certutil http". At end it is showing the error. Exception in thread "main" java.lang.IllegalArgumentException: ca certificate is not a CA! at o…

---

## [Generate a UUID using randomuuid in painless](https://discuss.elastic.co/t/generate-a-uuid-using-randomuuid-in-painless/144354)

<div class="topic-metadata">

**Author:** [@Yasser\_Ouakil](https://discuss.elastic.co/u/Yasser_Ouakil)\
**Replies:** 3\
**Last updated:** [August 21, 2018, 11:32am UTC](https://discuss.elastic.co/t/generate-a-uuid-using-randomuuid-in-painless/144354 "2018-08-21T11:32:43Z")

</div>

Hi, I need help please, i want to generate a UUID code with Painless language. I know that exists something like UUID.randomuuid() in Groovy, but is does not work in Painless. Thank you !

---

## [Kibana doesn't support Microsoft Edge](https://discuss.elastic.co/t/kibana-doesnt-support-microsoft-edge/78148)

<div class="topic-metadata">

**Author:** [@alastairs](https://discuss.elastic.co/u/alastairs)\
**Replies:** 3\
**Last updated:** [March 12, 2017, 12:25am UTC](https://discuss.elastic.co/t/kibana-doesnt-support-microsoft-edge/78148 "2017-03-12T00:25:12Z")

</div>

Hi there Frequently, when I hit the Kibana instance in my Elastic Cloud (cluster ID 049d81) using Microsoft Edge, I receive an error 80020101. Choosing either of the "Go back" or "clear your session" options returns me…

---

## [How to calculate the shard id/name for given routing string?](https://discuss.elastic.co/t/how-to-calculate-the-shard-id-name-for-given-routing-string/59529)

<div class="topic-metadata">

**Author:** [@gacio](https://discuss.elastic.co/u/gacio)\
**Replies:** 3\
**Last updated:** [September 1, 2016, 2:29pm UTC](https://discuss.elastic.co/t/how-to-calculate-the-shard-id-name-for-given-routing-string/59529 "2016-09-01T14:29:24Z")

</div>

I want to get the value of the shard ID/Name for a given routing string. Say I got two shards data-1 and data-2 and routing string route1. How can I simply calculate which shard ID/Name will be the result if the ES 2…

---

## [Ruby exception occurred: undefined method '\[\]' for nil:NilClass when filtering csv](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-for-nil-nilclass-when-filtering-csv/231893)

<div class="topic-metadata">

**Author:** [@eeijlar](https://discuss.elastic.co/u/eeijlar)\
**Replies:** 2\
**Last updated:** [May 10, 2020, 7:43pm UTC](https://discuss.elastic.co/t/ruby-exception-occurred-undefined-method-for-nil-nilclass-when-filtering-csv/231893 "2020-05-10T19:43:28Z")

</div>

I can't figure out why this filter is throwing this error: Ruby exception occurred: undefined method \[\] for nil:NilClass I have added a check anytime ruby could have thrown an exception: filter { ruby { code …

---

## [Logstash plugin mail error](https://discuss.elastic.co/t/logstash-plugin-mail-error/89964)

<div class="topic-metadata">

**Author:** [@baha1](https://discuss.elastic.co/u/baha1)\
**Replies:** 2\
**Last updated:** [June 20, 2017, 9:34am UTC](https://discuss.elastic.co/t/logstash-plugin-mail-error/89964 "2017-06-20T09:34:28Z")

</div>

Hi every body, i use mail plugin in logstash but doesn't work.i get this error: \[ERROR\]\[logstash.outputs.email \] Something happen while delivering an email {:exception=\>#\<EOFError: End of file reached this my config: …

---

## [Multiple Entity Type Indexing and Search](https://discuss.elastic.co/t/multiple-entity-type-indexing-and-search/306718)

<div class="topic-metadata">

**Author:** [@Gerardo\_Zenobi](https://discuss.elastic.co/u/Gerardo_Zenobi)\
**Replies:** 4\
**Last updated:** [June 23, 2022, 12:35pm UTC](https://discuss.elastic.co/t/multiple-entity-type-indexing-and-search/306718 "2022-06-23T12:35:04Z")

</div>

Hi there :wave: Let's say I have an application where I need to index multiple different types of entities: users, courses, programs, etc. Each of these entities will have a specific schema of their own, and different s…

---

## [500 Internal Server Error](https://discuss.elastic.co/t/500-internal-server-error/249970)

<div class="topic-metadata">

**Author:** [@DevPolo](https://discuss.elastic.co/u/DevPolo)\
**Replies:** 4\
**Last updated:** [September 29, 2020, 8:52am UTC](https://discuss.elastic.co/t/500-internal-server-error/249970 "2020-09-29T08:52:27Z")

</div>

Hi everyone, I'm actually trying to delete a document on my app search engine. I'm getting this response: 500 Internal Server Error If you are the administrator of this website, then please read this web application…

---

## [Logstash is not reading the data from the filebeats](https://discuss.elastic.co/t/logstash-is-not-reading-the-data-from-the-filebeats/236636)

<div class="topic-metadata">

**Author:** [@TUSHAR\_Sinha](https://discuss.elastic.co/u/TUSHAR_Sinha)\
**Replies:** 4\
**Last updated:** [June 16, 2020, 6:52pm UTC](https://discuss.elastic.co/t/logstash-is-not-reading-the-data-from-the-filebeats/236636 "2020-06-16T18:52:17Z")

</div>

I am trying to load the data into logstash which is read by the file beat, but logstash is unable to read the data. Here are my filebeat debug data that are being generated while running it. 2020-06-11T13:01:41.607+053…

---

## [Cloud-aws plugin with ceph bug?](https://discuss.elastic.co/t/cloud-aws-plugin-with-ceph-bug/42036)

<div class="topic-metadata">

**Author:** [@zilva](https://discuss.elastic.co/u/zilva)\
**Replies:** 4\
**Last updated:** [February 18, 2016, 7:21am UTC](https://discuss.elastic.co/t/cloud-aws-plugin-with-ceph-bug/42036 "2016-02-18T07:21:12Z")

</div>

Hello, I want to be able to create backup and restore using backup from ceph. I am using elasticsearch 2.0. To create backup I use these steps: create repository: curl -XPUT 'http://localhost:9200/\_snapshot/ceph\_repo…

---

## [File input not working on OSX](https://discuss.elastic.co/t/file-input-not-working-on-osx/37470)

<div class="topic-metadata">

**Author:** [@schmorgs](https://discuss.elastic.co/u/schmorgs)\
**Replies:** 4\
**Last updated:** [January 15, 2016, 1:42pm UTC](https://discuss.elastic.co/t/file-input-not-working-on-osx/37470 "2016-01-15T13:42:49Z")

</div>

I'm using the file input on my mac, and every time I update the file, it's replaying all messages from the beginning of the log. I've tried explicitly setting the sincedb\_path and start\_position vars, but no luck. .s…

---

## [Elasticsearch integration with Mongodb 3.2](https://discuss.elastic.co/t/elasticsearch-integration-with-mongodb-3-2/38403)

<div class="topic-metadata">

**Author:** [@senthinil](https://discuss.elastic.co/u/senthinil)\
**Replies:** 4\
**Last updated:** [January 7, 2016, 1:25am UTC](https://discuss.elastic.co/t/elasticsearch-integration-with-mongodb-3-2/38403 "2016-01-07T01:25:17Z")

</div>

Hi We are using Mongodb-3.2 version, which elasticsearch river https://github.com/richardwilly98/elasticsearch-river-mongodb would be the best to use, as your documentation does not mentions about the mongodb-3.2. Re…

---

## [Rollup jobs: Averages are Sums, ok! How can I visualize the actual averages in a Line Graph?](https://discuss.elastic.co/t/rollup-jobs-averages-are-sums-ok-how-can-i-visualize-the-actual-averages-in-a-line-graph/201263)

<div class="topic-metadata">

**Author:** [@jrubio](https://discuss.elastic.co/u/jrubio)\
**Replies:** 5\
**Last updated:** [October 4, 2019, 8:48am UTC](https://discuss.elastic.co/t/rollup-jobs-averages-are-sums-ok-how-can-i-visualize-the-actual-averages-in-a-line-graph/201263 "2019-10-04T08:48:35Z")

</div>

Hello all, I know that in rollup jobs elasticseach stores averages as sums of values (see https://discuss.elastic.co/t/es-6-3-2-rollup-avg-metric-does-a-sum-instead/146875). In this example can be seen how the average …

---

## [Migration from 5.2.2 to 6.1.1 - Index data is missing](https://discuss.elastic.co/t/migration-from-5-2-2-to-6-1-1-index-data-is-missing/115843)

<div class="topic-metadata">

**Author:** [@raj.shah1593](https://discuss.elastic.co/u/raj.shah1593)\
**Replies:** 5\
**Last updated:** [January 17, 2018, 1:14pm UTC](https://discuss.elastic.co/t/migration-from-5-2-2-to-6-1-1-index-data-is-missing/115843 "2018-01-17T13:14:59Z")

</div>

Hello, I have an active Elastic Search cluster v5.2.2 that I am currently using. We are planning to migrate ES to 6.1.1. While the older version was installed using rpm file, we installed the new version using tar fil…

---

## [Files are not processed with file input unless I edit them](https://discuss.elastic.co/t/files-are-not-processed-with-file-input-unless-i-edit-them/43276)

<div class="topic-metadata">

**Author:** [@syunusic](https://discuss.elastic.co/u/syunusic)\
**Replies:** 5\
**Last updated:** [March 3, 2016, 7:58pm UTC](https://discuss.elastic.co/t/files-are-not-processed-with-file-input-unless-i-edit-them/43276 "2016-03-03T19:58:41Z")

</div>

With the file input, I understand that sincedb traces if that file has been processed or not. If I have a new file, that never has being processed by logstash (so is not in sincedb). My input config is like this: inpu…

---

## [Having trouble adding muliple tables using logstash](https://discuss.elastic.co/t/having-trouble-adding-muliple-tables-using-logstash/344020)

<div class="topic-metadata">

**Author:** [@Mustapha\_Hadj](https://discuss.elastic.co/u/Mustapha_Hadj)\
**Replies:** 3\
**Last updated:** [September 28, 2023, 11:30pm UTC](https://discuss.elastic.co/t/having-trouble-adding-muliple-tables-using-logstash/344020 "2023-09-28T23:30:01Z")

</div>

so i have 7 tables in my sql database and i'v been trying to add all of them to an index trough logstash jdbc using a query file , the query goes somthing like SELECT \* FROM \[TABLE\]; SELECT \* FROM \[TABLE\]; SELECT \* FR…

---

## [Match\_phrase\_prefix : Can only use phrase prefix queries on text fields](https://discuss.elastic.co/t/match-phrase-prefix-can-only-use-phrase-prefix-queries-on-text-fields/231807)

<div class="topic-metadata">

**Author:** [@harishmce2005](https://discuss.elastic.co/u/harishmce2005)\
**Replies:** 1\
**Last updated:** [May 12, 2020, 9:51am UTC](https://discuss.elastic.co/t/match-phrase-prefix-can-only-use-phrase-prefix-queries-on-text-fields/231807 "2020-05-12T09:51:04Z")

</div>

I have upgraded one of our Elastic search version from 6.4.2 to 7.1.1. In one of our search query, we configured a 'match\_phrase\_prefix' on a 'keyword' type field and it was working in 6.4.2, please see the index struct…

---

## [Lens in Kibana 8.2.0 Only Works When Host Machine Connected to Internet](https://discuss.elastic.co/t/lens-in-kibana-8-2-0-only-works-when-host-machine-connected-to-internet/304998)

<div class="topic-metadata">

**Author:** [@eafrost.cissp](https://discuss.elastic.co/u/eafrost.cissp)\
**Replies:** 6\
**Last updated:** [May 18, 2022, 6:09pm UTC](https://discuss.elastic.co/t/lens-in-kibana-8-2-0-only-works-when-host-machine-connected-to-internet/304998 "2022-05-18T18:09:41Z")

</div>

I have upgraded my ELK stack on Windows 10 from version 7.71.1 to version 8.2.0. My production machines have no Internet connectivity. Everything works fine except for Lens visualizations in Kibana. I get a blank screen…

---

## [Корелляция событий](https://discuss.elastic.co/t/topic/56531)

<div class="topic-metadata">

**Author:** [@Cabbage](https://discuss.elastic.co/u/Cabbage)\
**Replies:** 6\
**Last updated:** [July 28, 2016, 9:37am UTC](https://discuss.elastic.co/t/topic/56531 "2016-07-28T09:37:26Z")

</div>

Добрый день! Я только начал знакомиться с функционалом. Если задача: 2 документа - документ1 содержит список событий с временными метками, документ2 содержит некий список сочетаний событий. Возможно ли как-то сравнить э…

---

## [Docker docker-compose Custom Kibana](https://discuss.elastic.co/t/docker-docker-compose-custom-kibana/102129)

<div class="topic-metadata">

**Author:** [@Dallas\_Toth](https://discuss.elastic.co/u/Dallas_Toth)\
**Replies:** 1\
**Last updated:** [September 28, 2017, 8:37pm UTC](https://discuss.elastic.co/t/docker-docker-compose-custom-kibana/102129 "2017-09-28T20:37:29Z")

</div>

I just wanted to give back to the community as it took me quite a few hours to get to this point of a custom Kibana running in Docker that can be redeployed with out loosing your changes.. 1st copy your files from the r…

---

## [\[idea\] Would creating "indexes" as "aliases" by default make sense?](https://discuss.elastic.co/t/idea-would-creating-indexes-as-aliases-by-default-make-sense/358993)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 2\
**Last updated:** [November 14, 2024, 9:22pm UTC](https://discuss.elastic.co/t/idea-would-creating-indexes-as-aliases-by-default-make-sense/358993 "2024-11-14T21:22:50Z")

</div>

As a follow up to my post on index renaming I had this idea. What if Elasticsearch created each index as an alias to the actual index in the first place? As in, when creating a new index, unless the user overrides it, …

---

## [elasticsearch.UnsupportedProductError: The client noticed that the server is not Elasticsearch and we do not support this unknown product](https://discuss.elastic.co/t/elasticsearch-unsupportedproducterror-the-client-noticed-that-the-server-is-not-elasticsearch-and-we-do-not-support-this-unknown-product/344379)

<div class="topic-metadata">

**Author:** [@Arshdeep\_Singh](https://discuss.elastic.co/u/Arshdeep_Singh)\
**Replies:** 2\
**Last updated:** [October 4, 2023, 11:15am UTC](https://discuss.elastic.co/t/elasticsearch-unsupportedproducterror-the-client-noticed-that-the-server-is-not-elasticsearch-and-we-do-not-support-this-unknown-product/344379 "2023-10-04T11:15:22Z")

</div>

Here I'm trying to create a full sync between Django's database and Elastic Search. While running the command "python manage.py search\_index --create -f", I'm getting the error: ERROR: Traceback (most recent call last)…

---

## [Error : java.lang.NoClassDefFoundError: org/elasticsearch/client/sniff/NodesSniffer](https://discuss.elastic.co/t/error-java-lang-noclassdeffounderror-org-elasticsearch-client-sniff-nodessniffer/300448)

<div class="topic-metadata">

**Author:** [@Prashant\_Kamble](https://discuss.elastic.co/u/Prashant_Kamble)\
**Replies:** 2\
**Last updated:** [March 24, 2022, 7:40am UTC](https://discuss.elastic.co/t/error-java-lang-noclassdeffounderror-org-elasticsearch-client-sniff-nodessniffer/300448 "2022-03-24T07:40:27Z")

</div>

We are getting this error java.lang.NoClassDefFoundError: org/elasticsearch/client/sniff/NodesSniffer on server. Application is working fine on local without any exception. We are using java 11 + Hibernate Search 6 + E…

---

## [How to ignore certain routes](https://discuss.elastic.co/t/how-to-ignore-certain-routes/189382)

<div class="topic-metadata">

**Author:** [@airstofather](https://discuss.elastic.co/u/airstofather)\
**Replies:** 2\
**Last updated:** [July 9, 2019, 1:37pm UTC](https://discuss.elastic.co/t/how-to-ignore-certain-routes/189382 "2019-07-09T13:37:30Z")

</div>

I'd like to know if it's possible to configure an AP agent to ingore certain routes. For instance, I would like the health check routes to be ignored to save on bandwidth and storage. We're using node js and I'm looing …

[Previous page](https://discuss.elastic.co/top.md?page=979&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=981&per_page=50&period=all)
