# Top

**URL:** https://discuss.elastic.co/top.md?page=993&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 994

---

## [What happens when Storm ESBolt capacity is over 1 for a long time?](https://discuss.elastic.co/t/what-happens-when-storm-esbolt-capacity-is-over-1-for-a-long-time/92784)

<div class="topic-metadata">

**Author:** [@ferran.munoz](https://discuss.elastic.co/u/ferran.munoz)\
**Replies:** 4\
**Last updated:** [July 20, 2017, 4:30pm UTC](https://discuss.elastic.co/t/what-happens-when-storm-esbolt-capacity-is-over-1-for-a-long-time/92784 "2017-07-20T16:30:29Z")

</div>

Hello, We are using Storm ESBolt to index documents to Elasticsearch. Our topology is reading the documents from Kafka and indexing them to Elasticsearch using ESBolt. We have peak periods during the day when the cap…

---

## [License extend](https://discuss.elastic.co/t/license-extend/70877)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 3\
**Last updated:** [January 8, 2017, 4:00pm UTC](https://discuss.elastic.co/t/license-extend/70877 "2017-01-08T16:00:41Z")

</div>

I downloaded an extend trail license that I received from Elastic and I am trying to install it on my Elasticsearch cluster. I am getting an error and unable to do it. mpswrk1@eaasrt!MPS:mpswrk1\> curl -XPUT -u elasti…

---

## [Phrase frequency in a document and in the whole collection](https://discuss.elastic.co/t/phrase-frequency-in-a-document-and-in-the-whole-collection/61616)

<div class="topic-metadata">

**Author:** [@user3482043](https://discuss.elastic.co/u/user3482043)\
**Replies:** 3\
**Last updated:** [October 5, 2016, 9:56pm UTC](https://discuss.elastic.co/t/phrase-frequency-in-a-document-and-in-the-whole-collection/61616 "2016-10-05T21:56:37Z")

</div>

Hi there, I am (re)asking this question, as it has been already asked by other users but no response is there yet ... https://discuss.elastic.co/t/document-frequency-of-phrases/21104 https://discuss.elastic.co/t/ca…

---

## [Error compiling packetbeat on OS X EI Capitan](https://discuss.elastic.co/t/error-compiling-packetbeat-on-os-x-ei-capitan/55148)

<div class="topic-metadata">

**Author:** [@billzy](https://discuss.elastic.co/u/billzy)\
**Replies:** 3\
**Last updated:** [July 11, 2016, 9:13am UTC](https://discuss.elastic.co/t/error-compiling-packetbeat-on-os-x-ei-capitan/55148 "2016-07-11T09:13:57Z")

</div>

I'm running into a weird situation here, hope someone could help me out ! While I was compiling packetbeat source code, I got the following error, go build # github.com/elastic/beats/vendor/github.com/tsg/gopacket/pc…

---

## [Logstash has suddenly stopped reading input files](https://discuss.elastic.co/t/logstash-has-suddenly-stopped-reading-input-files/242540)

<div class="topic-metadata">

**Author:** [@mskadu](https://discuss.elastic.co/u/mskadu)\
**Replies:** 7\
**Last updated:** [August 18, 2020, 10:44am UTC](https://discuss.elastic.co/t/logstash-has-suddenly-stopped-reading-input-files/242540 "2020-08-18T10:44:13Z")

</div>

Hello everyone, I have an interesting one. I have a working v7.7 logstash config (on RHEL 7.x) which has suddenly stopped ingesting files. I am using the file input plugin in read mode to ingest single-use CSV files (ea…

---

## [Elasticsearch service won't run on new installation](https://discuss.elastic.co/t/elasticsearch-service-wont-run-on-new-installation/188179)

<div class="topic-metadata">

**Author:** [@marcerickson](https://discuss.elastic.co/u/marcerickson)\
**Replies:** 7\
**Last updated:** [July 9, 2019, 11:41pm UTC](https://discuss.elastic.co/t/elasticsearch-service-wont-run-on-new-installation/188179 "2019-07-09T23:41:10Z")

</div>

System - Dell T310 32 GB RAM Ubuntu Server 18.04 with Xubuntu GUI added. Installation of GUI for Elasticsearch hasn't been done because the service won't stay running. Tell me what else you need to troubleshoot my issu…

---

## [Load csv file in logstash](https://discuss.elastic.co/t/load-csv-file-in-logstash/151319)

<div class="topic-metadata">

**Author:** [@balumurari1](https://discuss.elastic.co/u/balumurari1)\
**Replies:** 1\
**Last updated:** [October 8, 2018, 12:50pm UTC](https://discuss.elastic.co/t/load-csv-file-in-logstash/151319 "2018-10-08T12:50:17Z")

</div>

Please provide sample examples to upload csv, pdf files in logstash

---

## [ELK Scalability Query](https://discuss.elastic.co/t/elk-scalability-query/55649)

<div class="topic-metadata">

**Author:** [@Gunjan\_Gupta](https://discuss.elastic.co/u/Gunjan_Gupta)\
**Replies:** 7\
**Last updated:** [July 21, 2016, 5:30am UTC](https://discuss.elastic.co/t/elk-scalability-query/55649 "2016-07-21T05:30:02Z")

</div>

Scenario: 1.ELK is already placed and currently getting three different log files as input from three different server . 2.Now as my system is in place already ,if I want to add log file from fourth server on the fly…

---

## [Dynamic mapping error - Unable to create dynamic object](https://discuss.elastic.co/t/dynamic-mapping-error-unable-to-create-dynamic-object/250755)

<div class="topic-metadata">

**Author:** [@elastic78](https://discuss.elastic.co/u/elastic78)\
**Replies:** 5\
**Last updated:** [October 5, 2020, 5:06pm UTC](https://discuss.elastic.co/t/dynamic-mapping-error-unable-to-create-dynamic-object/250755 "2020-10-05T17:06:30Z")

</div>

Hi, We are trying to migrate from 5.5.2. to 6.8.12 version.Below is the sample of my mapping. I have set my mapping to dynamic:strict and only one object I would want to introduce dynamically so setting it to true. Thi…

---

## [Winlogbeat -\> Logstash -\> ES failing to write](https://discuss.elastic.co/t/winlogbeat-logstash-es-failing-to-write/116874)

<div class="topic-metadata">

**Author:** [@cymlog](https://discuss.elastic.co/u/cymlog)\
**Replies:** 5\
**Last updated:** [January 26, 2018, 3:41pm UTC](https://discuss.elastic.co/t/winlogbeat-logstash-es-failing-to-write/116874 "2018-01-26T15:41:37Z")

</div>

I am am experimenting with Winlogbeat, Logstash, ES. I am experiencing intermittent log writes into ES from logstash I have configured a WinServer 2008 R2 Vm with Winlogbeat used the following config to logstash (ensur…

---

## [Store an IP range in ES](https://discuss.elastic.co/t/store-an-ip-range-in-es/57468)

<div class="topic-metadata">

**Author:** [@finux](https://discuss.elastic.co/u/finux)\
**Replies:** 5\
**Last updated:** [August 10, 2016, 7:50am UTC](https://discuss.elastic.co/t/store-an-ip-range-in-es/57468 "2016-08-10T07:50:24Z")

</div>

SO i've tried to find an answer to this and i've had no luck in finding the answer. I want to store an IP range such as '5.10.89.104', '5.10.89.107' and then be able to search for data associated within the particular r…

---

## [Authentication with SHIELD is not working on MAC](https://discuss.elastic.co/t/authentication-with-shield-is-not-working-on-mac/2736)

<div class="topic-metadata">

**Author:** [@divyapt](https://discuss.elastic.co/u/divyapt)\
**Replies:** 5\
**Last updated:** [June 16, 2015, 7:45pm UTC](https://discuss.elastic.co/t/authentication-with-shield-is-not-working-on-mac/2736 "2015-06-16T19:45:55Z")

</div>

Hi, I downloaded and extracted elasticsearch-1.5.2 on mac and installed the shield plugin, and followed the steps given at https://www.elastic.co/guide/en/shield/current/quick-getting-started.html. But when i try curl -X…

---

## [Kibana 5 memory leak](https://discuss.elastic.co/t/kibana-5-memory-leak/78712)

<div class="topic-metadata">

**Author:** [@erikanderson753](https://discuss.elastic.co/u/erikanderson753)\
**Replies:** 1\
**Last updated:** [March 15, 2017, 3:23pm UTC](https://discuss.elastic.co/t/kibana-5-memory-leak/78712 "2017-03-15T15:23:07Z")

</div>

It looks like Kibana 5 has a memory leak. We are running on Windows 10/Chrome 57 and leave some dashboards running overnight. One dashboard starts at 196M for its tab and 24 hours later its at 2GB. Many of our tabs crash…

---

## [Logstash will not start with /tmp mounted noexec](https://discuss.elastic.co/t/logstash-will-not-start-with-tmp-mounted-noexec/324125)

<div class="topic-metadata">

**Author:** [@chuck1](https://discuss.elastic.co/u/chuck1)\
**Replies:** 6\
**Last updated:** [January 31, 2023, 7:39pm UTC](https://discuss.elastic.co/t/logstash-will-not-start-with-tmp-mounted-noexec/324125 "2023-01-31T19:39:53Z")

</div>

Logstash will not start with the /tmp directory mounted as noexec on RHEL 8.6. We fixed this with Elasticsearch. However, do not have the proper variables, guidance on how to fix this with Logstash. Thank You For Your …

---

## [Append nested variable's value to a string](https://discuss.elastic.co/t/append-nested-variables-value-to-a-string/285470)

<div class="topic-metadata">

**Author:** [@Voolkan](https://discuss.elastic.co/u/Voolkan)\
**Replies:** 6\
**Last updated:** [October 8, 2021, 3:10pm UTC](https://discuss.elastic.co/t/append-nested-variables-value-to-a-string/285470 "2021-10-08T15:10:49Z")

</div>

Hello, I'm trying to setup a bit of a dynamic solution to the logstash config, and especially the json filter part. When setting the json part, I need to provide a source and a target fields. With source it's easy, howe…

---

## [Filebeat Couldn't Send Logs to Logstash](https://discuss.elastic.co/t/filebeat-couldnt-send-logs-to-logstash/196334)

<div class="topic-metadata">

**Author:** [@kolten](https://discuss.elastic.co/u/kolten)\
**Replies:** 6\
**Last updated:** [August 26, 2019, 5:20pm UTC](https://discuss.elastic.co/t/filebeat-couldnt-send-logs-to-logstash/196334 "2019-08-26T17:20:54Z")

</div>

Hi, I get this error everytime. 2019-08-22T16:41:22.957+0300 ERROR logstash/async.go:256 Failed to publish events caused by: write tcp 172.30.10.5:49924-\>172.30.10.112:5046: wsasend: An existing connection was forcibly…

---

## [Filebeat multiline and other questions](https://discuss.elastic.co/t/filebeat-multiline-and-other-questions/106821)

<div class="topic-metadata">

**Author:** [@Eduard3000](https://discuss.elastic.co/u/Eduard3000)\
**Replies:** 6\
**Last updated:** [November 15, 2017, 8:02pm UTC](https://discuss.elastic.co/t/filebeat-multiline-and-other-questions/106821 "2017-11-15T20:02:18Z")

</div>

Hi, I am trying to write a jvm verbose gclog filebeat module: where is the right place to set the multiline option? how do I tell elastic to use my pipeline.json with grok filters as ingest pipeline. how to ext…

---

## [How to check the status of application pools](https://discuss.elastic.co/t/how-to-check-the-status-of-application-pools/309537)

<div class="topic-metadata">

**Author:** [@Anagha\_nambiar](https://discuss.elastic.co/u/Anagha_nambiar)\
**Replies:** 8\
**Last updated:** [July 14, 2022, 9:14pm UTC](https://discuss.elastic.co/t/how-to-check-the-status-of-application-pools/309537 "2022-07-14T21:14:08Z")

</div>

Hi Team, Can you please guide how to check the status of IIS application pools whether it is "started" or "stopped" in Kibana using metricbeat?

---

## [Unexpected token \[':'\] was expecting one of \[{\<EOF\>, ';'}\]](https://discuss.elastic.co/t/unexpected-token-was-expecting-one-of-eof/207298)

<div class="topic-metadata">

**Author:** [@Java\_Developet](https://discuss.elastic.co/u/Java_Developet)\
**Replies:** 0\
**Last updated:** [November 11, 2019, 8:17am UTC](https://discuss.elastic.co/t/unexpected-token-was-expecting-one-of-eof/207298 "2019-11-11T08:17:01Z")

</div>

Hello, in my mappings I have a field with the character ':' in it, specifically "meta\_og:type" : { "type" : "text", "fields" : { "keyword" : { "type" : "keyword", "ignore\_above" : 256 …

---

## [Remove header from log file](https://discuss.elastic.co/t/remove-header-from-log-file/137240)

<div class="topic-metadata">

**Author:** [@sweta\_khandelwal](https://discuss.elastic.co/u/sweta_khandelwal)\
**Replies:** 8\
**Last updated:** [June 25, 2018, 1:55pm UTC](https://discuss.elastic.co/t/remove-header-from-log-file/137240 "2018-06-25T13:55:24Z")

</div>

Hi, Can somebody please check below problem: I have message file in which only one line is there "DateTime,Session,url,errormessage,stacktrace,body". I don't want this line to be indexed in ES. So, I have written belo…

---

## [Json dashboard display from kibana-3 to 5.2](https://discuss.elastic.co/t/json-dashboard-display-from-kibana-3-to-5-2/79228)

<div class="topic-metadata">

**Author:** [@rahul\_surya](https://discuss.elastic.co/u/rahul_surya)\
**Replies:** 8\
**Last updated:** [March 21, 2017, 8:42pm UTC](https://discuss.elastic.co/t/json-dashboard-display-from-kibana-3-to-5-2/79228 "2017-03-21T20:42:26Z")

</div>

I am currently using one json dashboard for kibana-3.0 now i migrated to kibana-5.2.2 and json file for display in kibana-3.0 is placed in /var/www/html/app/dashboards/.json file and it working dashboard now when i try i…

---

## [Issue sorting nested documents indexed via Bulk](https://discuss.elastic.co/t/issue-sorting-nested-documents-indexed-via-bulk/139164)

<div class="topic-metadata">

**Author:** [@colinj](https://discuss.elastic.co/u/colinj)\
**Replies:** 3\
**Last updated:** [August 8, 2018, 3:43pm UTC](https://discuss.elastic.co/t/issue-sorting-nested-documents-indexed-via-bulk/139164 "2018-08-08T15:43:13Z")

</div>

Hello everyone, I recently came across a curious bug (i'm using version 6.2.3 of elasticsearch) occuring under very particular circumstances. The problem is on sorting parent documents based on a field from their neste…

---

## [ConnectTransportException non-master-eligible node found](https://discuss.elastic.co/t/connecttransportexception-non-master-eligible-node-found/266417)

<div class="topic-metadata">

**Author:** [@SSRR](https://discuss.elastic.co/u/SSRR)\
**Replies:** 2\
**Last updated:** [March 10, 2021, 4:00pm UTC](https://discuss.elastic.co/t/connecttransportexception-non-master-eligible-node-found/266417 "2021-03-10T16:00:28Z")

</div>

I'm configuring Elasticserach 7.9.0 cluster with 2 hosts. The elasticsearch.yml in host1 is setup with node.master as true and host2 is setup with node.master as false. Both hosts have elasticsearch started but with err…

---

## [How to display Column Data as headers (Transpose Data Table)](https://discuss.elastic.co/t/how-to-display-column-data-as-headers-transpose-data-table/124738)

<div class="topic-metadata">

**Author:** [@sahadevgd](https://discuss.elastic.co/u/sahadevgd)\
**Replies:** 2\
**Last updated:** [March 21, 2018, 9:13am UTC](https://discuss.elastic.co/t/how-to-display-column-data-as-headers-transpose-data-table/124738 "2018-03-21T09:13:17Z")

</div>

Hi Team, I'm working on Kibana 6.0. I'm feeding data via logstash and my data is in csv format. My Data: Time,Status,ServiceName 2018-03-15 15:30,Up,FETCH 2018-03-15 15:30,Up,UPDATE 2018-03-15 15:30,Up,DELETE 2018…

---

## [Spark: optimize partitioning](https://discuss.elastic.co/t/spark-optimize-partitioning/107425)

<div class="topic-metadata">

**Author:** [@amyantis](https://discuss.elastic.co/u/amyantis)\
**Replies:** 2\
**Last updated:** [December 5, 2017, 8:28am UTC](https://discuss.elastic.co/t/spark-optimize-partitioning/107425 "2017-12-05T08:28:41Z")

</div>

Hi, In Spark, I am reading data from Elasticsearch. I need to group documents over the value of a specific field in order to map those groups to a function. My mapper is therefore waiting for a list of documents that as…

---

## [How does the concept of a Splunk sourcetype within an index translate to ES?](https://discuss.elastic.co/t/how-does-the-concept-of-a-splunk-sourcetype-within-an-index-translate-to-es/103049)

<div class="topic-metadata">

**Author:** [@tjr1775](https://discuss.elastic.co/u/tjr1775)\
**Replies:** 2\
**Last updated:** [October 9, 2017, 7:58pm UTC](https://discuss.elastic.co/t/how-does-the-concept-of-a-splunk-sourcetype-within-an-index-translate-to-es/103049 "2017-10-09T19:58:37Z")

</div>

So coming from Splunk, there are various sourcetypes within an index, presumably without the limitations ES has on \_type and the fields needing to be uniform. How does the concept of a sourcetype translate to ES if you h…

---

## [Watcher Exception without using Watcher](https://discuss.elastic.co/t/watcher-exception-without-using-watcher/81753)

<div class="topic-metadata">

**Author:** [@zpp](https://discuss.elastic.co/u/zpp)\
**Replies:** 2\
**Last updated:** [April 10, 2017, 9:03am UTC](https://discuss.elastic.co/t/watcher-exception-without-using-watcher/81753 "2017-04-10T09:03:57Z")

</div>

HI, I'm having below exception in elasticsearch, of course, problems goes away once I grant permission to elasticsearch account. But since I'm not using Watcher, and I didn't install the plugin, why is watcher throwing e…

---

## [Time To Live](https://discuss.elastic.co/t/time-to-live/59117)

<div class="topic-metadata">

**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\
**Replies:** 2\
**Last updated:** [August 28, 2016, 5:30pm UTC](https://discuss.elastic.co/t/time-to-live/59117 "2016-08-28T17:30:33Z")

</div>

Hey Guys got a quick question about time to live I was going to great a Nagios index with a uniq id of - but then I ran across \_TTL https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping-ttl-field.h…

---

## [NEST 7.9 Bulk Partial Update failing](https://discuss.elastic.co/t/nest-7-9-bulk-partial-update-failing/250581)

<div class="topic-metadata">

**Author:** [@venkatsvr4](https://discuss.elastic.co/u/venkatsvr4)\
**Replies:** 1\
**Last updated:** [October 19, 2020, 2:09am UTC](https://discuss.elastic.co/t/nest-7-9-bulk-partial-update-failing/250581 "2020-10-19T02:09:11Z")

</div>

I am using Nest 7.9 client to bulk update documents in a huge index. Followed below 6.6 link to set up updates in C# List\<JObject\> jiras = new List\<JObject\>(); JObject id1 = new JObject(); …

---

## [Multiple ElasticSearch Indexes in Logstash Output](https://discuss.elastic.co/t/multiple-elasticsearch-indexes-in-logstash-output/46116)

<div class="topic-metadata">

**Author:** [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)\
**Replies:** 1\
**Last updated:** [April 2, 2016, 2:50pm UTC](https://discuss.elastic.co/t/multiple-elasticsearch-indexes-in-logstash-output/46116 "2016-04-02T14:50:22Z")

</div>

if\[type\] == "IISLogs" { elasticsearch { index =\> "iislogs" hosts =\> \["myserver:9200"\] } } else { elasticsearch { index =\> "filebeat-2016.03.27" hosts =\> \["myserver:9200"\] } } Since, filebeat in…

---

## [How to change analyzer](https://discuss.elastic.co/t/how-to-change-analyzer/41476)

<div class="topic-metadata">

**Author:** [@enp](https://discuss.elastic.co/u/enp)\
**Replies:** 1\
**Last updated:** [February 11, 2016, 12:20pm UTC](https://discuss.elastic.co/t/how-to-change-analyzer/41476 "2016-02-11T12:20:17Z")

</div>

I tried to change analyzer for field in existing index: PUT /system/events/\_mapping { "properties": { "message": { "type": "string", "analyzer": "simple" } } } The result is: { "error": { "root\_cause": \[ …

---

## [Best OS for elasticsearch](https://discuss.elastic.co/t/best-os-for-elasticsearch/6181)

<div class="topic-metadata">

**Author:** [@Serg\_Pilipenko](https://discuss.elastic.co/u/Serg_Pilipenko)\
**Replies:** 1\
**Last updated:** [December 17, 2011, 2:41am UTC](https://discuss.elastic.co/t/best-os-for-elasticsearch/6181 "2011-12-17T02:41:26Z")

</div>

Hi! I using RightImage\_CentOS\_5.4\_x64\_v5.6 image for ES cluster. But I heard recently that on ubuntu (version?) it works much faster. It's true? What meaningful difference between ubuntu and centos that makes it faste…

---

## [How to provide different config paths to start multiple Elasticsearch GA 6 instances in a single machine?](https://discuss.elastic.co/t/how-to-provide-different-config-paths-to-start-multiple-elasticsearch-ga-6-instances-in-a-single-machine/109529)

<div class="topic-metadata">

**Author:** [@elasticheart](https://discuss.elastic.co/u/elasticheart)\
**Replies:** 2\
**Last updated:** [November 29, 2017, 11:27am UTC](https://discuss.elastic.co/t/how-to-provide-different-config-paths-to-start-multiple-elasticsearch-ga-6-instances-in-a-single-machine/109529 "2017-11-29T11:27:48Z")

</div>

Hi, I am using Elasticsearch GA 6. I would like to run multiple ES instances in my machine. While I was using GA 5, I use to start elasticsearch like; ./elasticsearch -Epath.conf=../config/node1\_config ./elasticsearch …

---

## [nextJS RUM agent](https://discuss.elastic.co/t/nextjs-rum-agent/346842)

<div class="topic-metadata">

**Author:** [@Sami\_Ullah\_Jan1](https://discuss.elastic.co/u/Sami_Ullah_Jan1)\
**Replies:** 3\
**Last updated:** [November 13, 2023, 8:05am UTC](https://discuss.elastic.co/t/nextjs-rum-agent/346842 "2023-11-13T08:05:11Z")

</div>

Kibana version: v 8.10.4 Elasticsearch version:v 8.10.4 APM Server version: using agent only APM Agent language and version: elastic-agent-8.10.4-linux-x86\_64.tar.gz (standalone agent) Browser version: Chrome Version…

---

## [Logstash error connecting to ElasticSearch](https://discuss.elastic.co/t/logstash-error-connecting-to-elasticsearch/333168)

<div class="topic-metadata">

**Author:** [@audric\_w](https://discuss.elastic.co/u/audric_w)\
**Replies:** 3\
**Last updated:** [May 11, 2023, 10:29pm UTC](https://discuss.elastic.co/t/logstash-error-connecting-to-elasticsearch/333168 "2023-05-11T22:29:15Z")

</div>

I've tried to created sidecar using beats and logstash on OpenShift. However the logstash always attempted to resurrect connection to dead ES instance (to http://elastisearch:9200), despite configs that I've done. Logst…

---

## [Config Elasticsearch for a headless system](https://discuss.elastic.co/t/config-elasticsearch-for-a-headless-system/242312)

<div class="topic-metadata">

**Author:** [@Peter\_Boos](https://discuss.elastic.co/u/Peter_Boos)\
**Replies:** 3\
**Last updated:** [July 23, 2020, 12:36pm UTC](https://discuss.elastic.co/t/config-elasticsearch-for-a-headless-system/242312 "2020-07-23T12:36:26Z")

</div>

I'm (trying) to run ELK on a headless console only system. So far it only says: Kibana server is not ready yet through a ssh i can see the tail -f /var/log/syslog Logging this error which is a bit long oneliner : …

---

## [Query on multiple collections at once with mongodb](https://discuss.elastic.co/t/query-on-multiple-collections-at-once-with-mongodb/226571)

<div class="topic-metadata">

**Author:** [@chawki](https://discuss.elastic.co/u/chawki)\
**Replies:** 3\
**Last updated:** [April 6, 2020, 3:31pm UTC](https://discuss.elastic.co/t/query-on-multiple-collections-at-once-with-mongodb/226571 "2020-04-06T15:31:43Z")

</div>

Can I able to search on multiple mongodb collections with elastic search at once?

---

## [Retrying failed action with response code: 503 unavailable\_shards\_exception, reason =\> logstash primary shard is not active](https://discuss.elastic.co/t/retrying-failed-action-with-response-code-503-unavailable-shards-exception-reason-logstash-primary-shard-is-not-active/226437)

<div class="topic-metadata">

**Author:** [@vignesh.s2](https://discuss.elastic.co/u/vignesh.s2)\
**Replies:** 3\
**Last updated:** [April 5, 2020, 1:19pm UTC](https://discuss.elastic.co/t/retrying-failed-action-with-response-code-503-unavailable-shards-exception-reason-logstash-primary-shard-is-not-active/226437 "2020-04-05T13:19:51Z")

</div>

After upgrading to the latest version of the ELK 7.6.2 , I tried to restart the all the services. Only elasticsearch service is up and running. Logstash and kibana failed. Below mentioned is the error Apr 03 21:56:46 C…

---

## [How to return highlight results in position order?](https://discuss.elastic.co/t/how-to-return-highlight-results-in-position-order/29820)

<div class="topic-metadata">

**Author:** [@Youxu](https://discuss.elastic.co/u/Youxu)\
**Replies:** 3\
**Last updated:** [September 23, 2015, 2:38am UTC](https://discuss.elastic.co/t/how-to-return-highlight-results-in-position-order/29820 "2015-09-23T02:38:53Z")

</div>

I am using highlight feature in our product with following like query: "highlight": { "fields": { "content": { "fragment\_size": 100, "number\_of\_fragments": 3 } } } seems the default…

---

## [ClassNotFoundException: org.elasticsearch.index.analysis.hebrew.HebrewAnalyzerProvider](https://discuss.elastic.co/t/classnotfoundexception-org-elasticsearch-index-analysis-hebrew-hebrewanalyzerprovider/25637)

<div class="topic-metadata">

**Author:** [@drippel](https://discuss.elastic.co/u/drippel)\
**Replies:** 3\
**Last updated:** [August 19, 2015, 7:16am UTC](https://discuss.elastic.co/t/classnotfoundexception-org-elasticsearch-index-analysis-hebrew-hebrewanalyzerprovider/25637 "2015-08-19T07:16:17Z")

</div>

I am trying to create an index with the following settings (I don't have a Hebrew plugin and I am trying to create a simple Hebrew analyzer): { "analysis" : { "filter" : { "hebrew\_common\_grams\_index" : { …

---

## [Handling hyphenated words like "e-mail" with tokenizer/stemmer](https://discuss.elastic.co/t/handling-hyphenated-words-like-e-mail-with-tokenizer-stemmer/66295)

<div class="topic-metadata">

**Author:** [@David\_Steiner](https://discuss.elastic.co/u/David_Steiner)\
**Replies:** 4\
**Last updated:** [November 29, 2016, 8:52pm UTC](https://discuss.elastic.co/t/handling-hyphenated-words-like-e-mail-with-tokenizer-stemmer/66295 "2016-11-29T20:52:09Z")

</div>

Ideally, I would like to be able to stem "e-mail" to "email" so that whether someone has typed it one way or the other, a search in the stemmed field will find it. Currently, it appears the standard tokenizer changes "e…

---

## [Dec 20th, 2023: \[EN\] Mastering Elastic Agent Scalability: Navigating the Holiday Surge with SQS, S3, and CloudWatch](https://discuss.elastic.co/t/dec-20th-2023-en-mastering-elastic-agent-scalability-navigating-the-holiday-surge-with-sqs-s3-and-cloudwatch/347299)

<div class="topic-metadata">

**Author:** [@Tamara\_Dancheva](https://discuss.elastic.co/u/Tamara_Dancheva)\
**Replies:** 0\
**Last updated:** [December 20, 2023, 8:00am UTC](https://discuss.elastic.co/t/dec-20th-2023-en-mastering-elastic-agent-scalability-navigating-the-holiday-surge-with-sqs-s3-and-cloudwatch/347299 "2023-12-20T08:00:09Z")

</div>

Tags: #logs, #beats, filebeat, #scale, #cloudwatch, #s3, #sqs Ever found yourself wondering how to scale your Agent or your standalone Beats implementation? Are you currently grappling with the challenge of ingesting…

---

## [Bulk get (\_mget) performance when using ES as key value store](https://discuss.elastic.co/t/bulk-get-mget-performance-when-using-es-as-key-value-store/162957)

<div class="topic-metadata">

**Author:** [@mjuric](https://discuss.elastic.co/u/mjuric)\
**Replies:** 2\
**Last updated:** [January 30, 2019, 5:45pm UTC](https://discuss.elastic.co/t/bulk-get-mget-performance-when-using-es-as-key-value-store/162957 "2019-01-30T17:45:18Z")

</div>

We are primarily using ElasticSearch for search index purposes, but we now have an internal use case where we are using ElasticSearch as a key value store through the bulk get API (\_mget) to fetch a lot of documents at o…

---

## [Filebeat source field missing in 7.8](https://discuss.elastic.co/t/filebeat-source-field-missing-in-7-8/289005)

<div class="topic-metadata">

**Author:** [@PMDubuc](https://discuss.elastic.co/u/PMDubuc)\
**Replies:** 5\
**Last updated:** [November 11, 2021, 8:48pm UTC](https://discuss.elastic.co/t/filebeat-source-field-missing-in-7-8/289005 "2021-11-11T20:48:31Z")

</div>

We've recently upgraded our elastic stack and have upgraded our Filebeat version from 5.6.14 to 7.8.1. The old version used to provide a "source" field that contained the path name of the log file. This field is missin…

---

## [What is problem?](https://discuss.elastic.co/t/what-is-problem/71077)

<div class="topic-metadata">

**Author:** [@pauloriply88](https://discuss.elastic.co/u/pauloriply88)\
**Replies:** 5\
**Last updated:** [January 10, 2017, 10:21pm UTC](https://discuss.elastic.co/t/what-is-problem/71077 "2017-01-10T22:21:26Z")

</div>

after RPM install on centos 6.8. Final, can't start elastic with init. system write Starting elasticsearch: /usr/share/elasticsearch/bin/elasticsearch: line 198: 9789 Killed exec "$JAVA" $ES\_JAVA\_OPTS -…

---

## [Kibana does not show the detailed field names](https://discuss.elastic.co/t/kibana-does-not-show-the-detailed-field-names/38563)

<div class="topic-metadata">

**Author:** [@hahaha](https://discuss.elastic.co/u/hahaha)\
**Replies:** 5\
**Last updated:** [January 8, 2016, 6:35am UTC](https://discuss.elastic.co/t/kibana-does-not-show-the-detailed-field-names/38563 "2016-01-08T06:35:40Z")

</div>

I installed Elasticsearch 2.1.1 and kibana 4.3.1 on Windows 7 and inserted some sample data. In elasticsearch, I can see all the data and get query results. but in Kibana setting page, I can see only the number of fiel…

---

## [Deleting Record from ES](https://discuss.elastic.co/t/deleting-record-from-es/38238)

<div class="topic-metadata">

**Author:** [@Sivaprakash\_Shanmuga](https://discuss.elastic.co/u/Sivaprakash_Shanmuga)\
**Replies:** 5\
**Last updated:** [January 2, 2016, 1:33pm UTC](https://discuss.elastic.co/t/deleting-record-from-es/38238 "2016-01-02T13:33:54Z")

</div>

Hi I have indexed data in Elastic Search as {"\_index":"school","\_type":"student","\_id":"AVHKjoOLfAoTEUc3htss","\_score":1.0,"\_source":{ "schoolId" : "1952", "studentId" : "1053", "createdDate" : "2009-11-15T14:12:12…

---

## [Unable to locate package elasticsearch (OSS Version)](https://discuss.elastic.co/t/unable-to-locate-package-elasticsearch-oss-version/212756)

<div class="topic-metadata">

**Author:** [@Alexandra\_Monteiro](https://discuss.elastic.co/u/Alexandra_Monteiro)\
**Replies:** 0\
**Last updated:** [December 21, 2019, 10:36pm UTC](https://discuss.elastic.co/t/unable-to-locate-package-elasticsearch-oss-version/212756 "2019-12-21T22:36:42Z")

</div>

Hi everyone, I was having some troubles with Kibana connecting to Elasticsearch. Then I read that I needed to install the OSS version to solve it. Following the tutorial I added this line: echo "deb https://artifacts.e…

---

## [Logstash keep throwing exceptions every few seconds](https://discuss.elastic.co/t/logstash-keep-throwing-exceptions-every-few-seconds/148476)

<div class="topic-metadata">

**Author:** [@Robin\_Guo](https://discuss.elastic.co/u/Robin_Guo)\
**Replies:** 7\
**Last updated:** [September 19, 2018, 11:53pm UTC](https://discuss.elastic.co/t/logstash-keep-throwing-exceptions-every-few-seconds/148476 "2018-09-19T23:53:19Z")

</div>

Backgroud: we have almost 200 beats client and a ELK cluster are consists of 20 ES data,3 master and 2 client nodes. logstash is a cluster with 4 nodes behind the haproxy. The archtechture like this: metricbeat/fileb…

---

## [Importing datasets](https://discuss.elastic.co/t/importing-datasets/106681)

<div class="topic-metadata">

**Author:** [@arpit\_sopra](https://discuss.elastic.co/u/arpit_sopra)\
**Replies:** 1\
**Last updated:** [November 7, 2017, 1:09pm UTC](https://discuss.elastic.co/t/importing-datasets/106681 "2017-11-07T13:09:17Z")

</div>

I have just started learning elasticsearch. Can someone please explain me these lines: curl -H "Content-Type: application/json" -XPOST 'localhost:9200/bank/account/\_bulk?pretty&refresh' --data-binary "@accounts.json" c…

[Previous page](https://discuss.elastic.co/top.md?page=992&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=994&per_page=50&period=all)
