# Elastic Stack **URL:** https://discuss.elastic.co/c/elastic-stack/81.md?page=1065 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1066 --- ## [Kibana Sizing Guide?](https://discuss.elastic.co/t/kibana-sizing-guide/296395)
**Author:** [@crpj](https://discuss.elastic.co/u/crpj)\ **Replies:** 4\ **Last updated:** [February 7, 2022, 4:44am UTC](https://discuss.elastic.co/t/kibana-sizing-guide/296395 "2022-02-07T04:44:51Z")
Hello, I am attempting to create a sizing estimate and did not find specific guidance for Kibana, could anyone clarify if there is an official guide? As of now, I am considering this setup to be a single machine: 4 CPU… --- ## [Elasticsearch-5.5.1 not starting](https://discuss.elastic.co/t/elasticsearch-5-5-1-not-starting/296325)
**Author:** [@Kiranreddyk](https://discuss.elastic.co/u/Kiranreddyk)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 4:43am UTC](https://discuss.elastic.co/t/elasticsearch-5-5-1-not-starting/296325 "2022-02-07T04:43:32Z")
HI , Need help on Elasticsearch-5.5.1.. When i start services on RHEL 7 .. it just hungs without any logs/error message.. where as I am able start Elasticsearch-6.2.2 services on same server.. This is all hapening af… --- ## [Logstash Persistant Queue](https://discuss.elastic.co/t/logstash-persistant-queue/296410)
**Author:** [@amitmahajan29](https://discuss.elastic.co/u/amitmahajan29)\ **Replies:** 0\ **Last updated:** [February 7, 2022, 4:18am UTC](https://discuss.elastic.co/t/logstash-persistant-queue/296410 "2022-02-07T04:18:17Z")
I'm trying to create a persistant Queue which will sit between logstash and Elasticsearch. My aim being, in case the cluster goes red due to any scenario, the logs won't be lost. But since the persistant queue typicall… --- ## [Create alerts for logs ingestion in kibana](https://discuss.elastic.co/t/create-alerts-for-logs-ingestion-in-kibana/295772)
**Author:** [@abhi.logs](https://discuss.elastic.co/u/abhi.logs)\ **Replies:** 6\ **Last updated:** [February 7, 2022, 4:16am UTC](https://discuss.elastic.co/t/create-alerts-for-logs-ingestion-in-kibana/295772 "2022-02-07T04:16:07Z")
Hello, I'm trying to create an alert for log ingestion alert. ex- If we have one index pattern and logs stopped coming to the kibana for the last 5 min, Can we create an alert for this in kibana? --- ## [Filter for field contains value in Dashboard](https://discuss.elastic.co/t/filter-for-field-contains-value-in-dashboard/296398)
**Author:** [@ShayWeizman](https://discuss.elastic.co/u/ShayWeizman)\ **Replies:** 5\ **Last updated:** [February 7, 2022, 3:29am UTC](https://discuss.elastic.co/t/filter-for-field-contains-value-in-dashboard/296398 "2022-02-07T03:29:29Z")
Hi All, I'm using 7.16.2 version. I want to ask if there is a possibility to filter the dashboard by field that contain certain string? Thanks, Shay --- ## [How do I restore certificate created on one node to other?](https://discuss.elastic.co/t/how-do-i-restore-certificate-created-on-one-node-to-other/296377)
**Author:** [@Blason](https://discuss.elastic.co/u/Blason)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 2:39am UTC](https://discuss.elastic.co/t/how-do-i-restore-certificate-created-on-one-node-to-other/296377 "2022-02-07T02:39:51Z")
Hi Team, I have created one setup for testing purpose where I installed complete elasticstack on one host with complete certificates. In case if that host is crashed and If I need to resinstall the new host; how do I r… --- ## [Find all the nearest points that lie near linestring data](https://discuss.elastic.co/t/find-all-the-nearest-points-that-lie-near-linestring-data/296400)
**Author:** [@vaseem001](https://discuss.elastic.co/u/vaseem001)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 1:58am UTC](https://discuss.elastic.co/t/find-all-the-nearest-points-that-lie-near-linestring-data/296400 "2022-02-07T01:58:08Z")
Let's say I have an index of points and I query linestring data so how can I find the nearest point that lies near give linestring data --- ## [How to compare index pattern values?](https://discuss.elastic.co/t/how-to-compare-index-pattern-values/296394)
**Author:** [@Travel\_Time](https://discuss.elastic.co/u/Travel_Time)\ **Replies:** 1\ **Last updated:** [February 7, 2022, 1:56am UTC](https://discuss.elastic.co/t/how-to-compare-index-pattern-values/296394 "2022-02-07T01:56:55Z")
Hello. I want to compare index patterns and as a result find the same ones. So for example I have index pattern1 where I have indexes with columns like --\> |pattern1\* \[index-1, index-2\] | col1 | col2 | col3 | ==… --- ## [Beginner here; how do I](https://discuss.elastic.co/t/beginner-here-how-do-i/292514)
**Author:** [@end-user](https://discuss.elastic.co/u/end-user)\ **Replies:** 26\ **Last updated:** [February 7, 2022, 12:34am UTC](https://discuss.elastic.co/t/beginner-here-how-do-i/292514 "2022-02-07T00:34:43Z")
I'm new to this stack ecosystem and I was hoping someone could point me to the elements that might fit my project. I have a command that I'd like to run on a schedule (like every 10 minutes) that generates some good met… --- ## [Storage size doubled after Update By Query](https://discuss.elastic.co/t/storage-size-doubled-after-update-by-query/296405)
**Author:** [@yamaga](https://discuss.elastic.co/u/yamaga)\ **Replies:** 1\ **Last updated:** [February 6, 2022, 11:58pm UTC](https://discuss.elastic.co/t/storage-size-doubled-after-update-by-query/296405 "2022-02-06T23:58:17Z")
Hi, Mi index has 17Gb of storage size But where I executed (2 times !) the "update by query" querey to copy a field in an other one the size is increased : The Docs count doesnt change. POST jp\_data\_stk\_mouv/\_updat… --- ## [Aggregations for combinations / permutations?](https://discuss.elastic.co/t/aggregations-for-combinations-permutations/296058)
**Author:** [@Emporea](https://discuss.elastic.co/u/Emporea)\ **Replies:** 2\ **Last updated:** [February 6, 2022, 11:17pm UTC](https://discuss.elastic.co/t/aggregations-for-combinations-permutations/296058 "2022-02-06T23:17:18Z")
Are there aggregations available to calculate combinations or permutations of keywords in one field or more field per document? Or is this a task for some painless script action I should learn? Example: keyword\_field … --- ## [Elastic Stack setup with multiple instances of different Beats](https://discuss.elastic.co/t/elastic-stack-setup-with-multiple-instances-of-different-beats/296109)
**Author:** [@Jonas\_S](https://discuss.elastic.co/u/Jonas_S)\ **Replies:** 3\ **Last updated:** [February 6, 2022, 9:57pm UTC](https://discuss.elastic.co/t/elastic-stack-setup-with-multiple-instances-of-different-beats/296109 "2022-02-06T21:57:34Z")
Hello, we want to use multiple instances of the different Beats. (File, Metric, Winlog, Packet and Heart) Metricbeat on multiple servers for monitoring, Filebeat on multiple servers for logs and so on. They should col… --- ## [Getting Error while configuring ELK stack Filebeat to remote server via Terraform](https://discuss.elastic.co/t/getting-error-while-configuring-elk-stack-filebeat-to-remote-server-via-terraform/296252)
**Author:** [@MurLeeDas](https://discuss.elastic.co/u/MurLeeDas)\ **Replies:** 0\ **Last updated:** [February 4, 2022, 5:47am UTC](https://discuss.elastic.co/t/getting-error-while-configuring-elk-stack-filebeat-to-remote-server-via-terraform/296252 "2022-02-04T05:47:51Z")
Hello All, My usecase is to deploy ELK stack to AWS ubuntu server. I have all the required installation and configurations commands in .sh file in the local. And while doing apply, I am getting error in the remote exec … --- ## [Concatenating 3 columns using Computed columns in enhanced table](https://discuss.elastic.co/t/concatenating-3-columns-using-computed-columns-in-enhanced-table/296269)
**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\ **Replies:** 2\ **Last updated:** [February 6, 2022, 9:47pm UTC](https://discuss.elastic.co/t/concatenating-3-columns-using-computed-columns-in-enhanced-table/296269 "2022-02-06T21:47:18Z")
Hi all, There are 3 fields a,b,c . For every document, only 1 of them will have a value. So I'm trying to concatenate 3 columns , but it is showing null with the string. For example : document 1: a=Hi b= c= When … --- ## [Should I have one Index or Multiple Indexes](https://discuss.elastic.co/t/should-i-have-one-index-or-multiple-indexes/296312)
**Author:** [@Pawan\_Misra](https://discuss.elastic.co/u/Pawan_Misra)\ **Replies:** 2\ **Last updated:** [February 6, 2022, 9:46pm UTC](https://discuss.elastic.co/t/should-i-have-one-index-or-multiple-indexes/296312 "2022-02-06T21:46:29Z")
We have a scenario where we have data from multiple clients. some figures to note: No of clients - 100 Data/client - 10GB (avg) With the above data, what should be our Indexing strategy? We know that we will need to… --- ## [Use LVM cache for Elasticsearch](https://discuss.elastic.co/t/use-lvm-cache-for-elasticsearch/296326)
**Author:** [@kannan\_raj](https://discuss.elastic.co/u/kannan_raj)\ **Replies:** 1\ **Last updated:** [February 6, 2022, 9:45pm UTC](https://discuss.elastic.co/t/use-lvm-cache-for-elasticsearch/296326 "2022-02-06T21:45:46Z")
Hello Everyone, can we use the Elasticseacrh with LVM cache logical volume? Cache logical volume The cache logical volume type uses a small and fast LV to improve the performance of a large and slow LV. It does this … --- ## [Couldn't find any Elasticsearch data](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data/296330)
**Author:** [@mikemiko](https://discuss.elastic.co/u/mikemiko)\ **Replies:** 1\ **Last updated:** [February 6, 2022, 9:44pm UTC](https://discuss.elastic.co/t/couldnt-find-any-elasticsearch-data/296330 "2022-02-06T21:44:55Z")
I deployed an EFK stack on a 3 Node Kubernetes cluster (kind cluster). The Cluster is also running a custom app that I intend to monitor through the stack. All Pods are running. I can access Kibana at: \\ **Author:** [@nsimi](https://discuss.elastic.co/u/nsimi)\ **Replies:** 1\ **Last updated:** [February 6, 2022, 9:44pm UTC](https://discuss.elastic.co/t/can-i-have-two-different-kibana-servers-pointed-at-the-same-elasticsearch-cluster/296339 "2022-02-06T21:44:20Z") Good Morning All, I have an ES cluster running and an instance of Kibana (Lets call this instance A) pointed at that. And because of some involved weird "business reasons" I wanted to know if I could have a separate Kib… --- ## [Creating ilm policies in Java using new java api client](https://discuss.elastic.co/t/creating-ilm-policies-in-java-using-new-java-api-client/296375)
**Author:** [@Nicolas35](https://discuss.elastic.co/u/Nicolas35)\ **Replies:** 0\ **Last updated:** [February 6, 2022, 12:18am UTC](https://discuss.elastic.co/t/creating-ilm-policies-in-java-using-new-java-api-client/296375 "2022-02-06T00:18:43Z")
Hi, I am stuck creating a policy in java using the new java api client. I am using Elasticsearch-java 7.16.2 Here is the faulty code: String json= "{\\"allocate\\" : {\\"number\_of\_replicas\\" : 1}," + "\\"fo… --- ## [ElastisSearch JVM Heap running full](https://discuss.elastic.co/t/elastissearch-jvm-heap-running-full/295928)
**Author:** [@grregm](https://discuss.elastic.co/u/grregm)\ **Replies:** 5\ **Last updated:** [February 6, 2022, 9:00pm UTC](https://discuss.elastic.co/t/elastissearch-jvm-heap-running-full/295928 "2022-02-06T21:00:17Z")
Hey there, We are running a Elasticsearch (7.16.1, Docker inside Kubernetes) cluster which is monitored by a Kibana Stack. After 5-6 days (sometimes sooner) Elasticsearch is running into JVM Heap issues/errors. Is there… --- ## [Threatintel/Misp var.filters type making filebeat service stop!](https://discuss.elastic.co/t/threatintel-misp-var-filters-type-making-filebeat-service-stop/296197)
**Author:** [@A\_Abdellah](https://discuss.elastic.co/u/A_Abdellah)\ **Replies:** 2\ **Last updated:** [February 6, 2022, 6:30pm UTC](https://discuss.elastic.co/t/threatintel-misp-var-filters-type-making-filebeat-service-stop/296197 "2022-02-06T18:30:59Z")
Hello, I'm using misp threatintel and i tried to filter data by type but filebeat is keep refusing the configuration and only starts if I remove the filters, even when I tried to use the same example proposed by docume… --- ## [How to print multiple text rows with vega](https://discuss.elastic.co/t/how-to-print-multiple-text-rows-with-vega/296085)
**Author:** [@TUKTUK](https://discuss.elastic.co/u/TUKTUK)\ **Replies:** 2\ **Last updated:** [February 6, 2022, 5:47pm UTC](https://discuss.elastic.co/t/how-to-print-multiple-text-rows-with-vega/296085 "2022-02-06T17:47:22Z")
Hi, all I am pretty new to the Vega world inside Kibana and was wondering if there is some easy way to simply print text fields in rows. I know that Vega is not designed to output text, nevertheless, someone knows maybe… --- ## [How to restore snapshot to a different cluster](https://discuss.elastic.co/t/how-to-restore-snapshot-to-a-different-cluster/296182)
**Author:** [@Adityadgr8](https://discuss.elastic.co/u/Adityadgr8)\ **Replies:** 6\ **Last updated:** [February 6, 2022, 2:43pm UTC](https://discuss.elastic.co/t/how-to-restore-snapshot-to-a-different-cluster/296182 "2022-02-06T14:43:02Z")
Hello Guys, I have taken a snapshot of Elasticsearch db in one of the cluster(here Elasticsearch is running as kubernetes pods, 3 pods of Elasticsearch are running) and now I want that snapshot to be restored into a com… --- ## [Script field along with all the other fields using Painless](https://discuss.elastic.co/t/script-field-along-with-all-the-other-fields-using-painless/296384)
**Author:** [@saurab](https://discuss.elastic.co/u/saurab)\ **Replies:** 3\ **Last updated:** [February 6, 2022, 12:10pm UTC](https://discuss.elastic.co/t/script-field-along-with-all-the-other-fields-using-painless/296384 "2022-02-06T12:10:19Z")
I have data indexed as follows: {"index":{"\_id":1}} {"first":"johnny","last":"gaudreau","goals":\[9,27,1\],"born":"1993/08/13"} {"index":{"\_id":2}} {"first":"sean","last":"monohan","goals":\[7,54,26\],"born":"1994/10/12"} W… --- ## [Automatically centre the map around a specified point by dropdown menu](https://discuss.elastic.co/t/automatically-centre-the-map-around-a-specified-point-by-dropdown-menu/296281)
**Author:** [@Angad\_Panesar1](https://discuss.elastic.co/u/Angad_Panesar1)\ **Replies:** 1\ **Last updated:** [February 4, 2022, 7:44pm UTC](https://discuss.elastic.co/t/automatically-centre-the-map-around-a-specified-point-by-dropdown-menu/296281 "2022-02-04T19:44:01Z")
Hi, There is a dropdown menu filter of ID's with each of them having different latitudes and longitudes on the map. Is there any way that I can centre the map around the specified point by clicking on the ID in the dropd… --- ## [Use one ingest pipeline as default\_pipeline for different indexes](https://discuss.elastic.co/t/use-one-ingest-pipeline-as-default-pipeline-for-different-indexes/296266)
**Author:** [@m-cd](https://discuss.elastic.co/u/m-cd)\ **Replies:** 2\ **Last updated:** [February 6, 2022, 9:15am UTC](https://discuss.elastic.co/t/use-one-ingest-pipeline-as-default-pipeline-for-different-indexes/296266 "2022-02-06T09:15:05Z")
Hi All, I'm a little bit new on the ELK world... So sorry for my newbie question... I setup a working ingest pipeline (policy and processors) and it works like a charm on one index as default\_pipeline. I would like t… --- ## [How to organize snmp tables like in nagios](https://discuss.elastic.co/t/how-to-organize-snmp-tables-like-in-nagios/296372)
**Author:** [@Samt1](https://discuss.elastic.co/u/Samt1)\ **Replies:** 1\ **Last updated:** [February 6, 2022, 1:32am UTC](https://discuss.elastic.co/t/how-to-organize-snmp-tables-like-in-nagios/296372 "2022-02-06T01:32:23Z")
Hello. I'm trying to monitor some devices via snmp and logstash. I want to display the information in a table like this (this table is from nagios). Is it possible? I've made some tables on the visualization library, bu… --- ## [Attempt to divide two fields at the aggregate level causing infinity response](https://discuss.elastic.co/t/attempt-to-divide-two-fields-at-the-aggregate-level-causing-infinity-response/296198)
**Author:** [@LuigiGalati](https://discuss.elastic.co/u/LuigiGalati)\ **Replies:** 20\ **Last updated:** [February 5, 2022, 11:08pm UTC](https://discuss.elastic.co/t/attempt-to-divide-two-fields-at-the-aggregate-level-causing-infinity-response/296198 "2022-02-05T23:08:45Z")
I am feeding kibana with an HR dataset from peoplesoft. The data is beginning, end and termination counts by fiscal year. There is no timestamped data used. I need to calculate percent turnover which is Terminations/(Ave… --- ## [Query sample of each field in index](https://discuss.elastic.co/t/query-sample-of-each-field-in-index/296370)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 0\ **Last updated:** [February 5, 2022, 10:11pm UTC](https://discuss.elastic.co/t/query-sample-of-each-field-in-index/296370 "2022-02-05T22:11:41Z")
I am trying to develop data-catalog app this app shows all fields (in flat dict format) its mapping type and sample data for instance this index POST test/\_doc { "@timestamp": "2099-11-15T13:12:00", "message": "GE… --- ## [Java client, which libraries, packages](https://discuss.elastic.co/t/java-client-which-libraries-packages/296366)
**Author:** [@mamueIV](https://discuss.elastic.co/u/mamueIV)\ **Replies:** 0\ **Last updated:** [February 5, 2022, 8:25pm UTC](https://discuss.elastic.co/t/java-client-which-libraries-packages/296366 "2022-02-05T20:25:17Z")
Hi, i try to get started with Elasticsearch development in java. Alas still no javadoc as far as i can see and the source examples are quite confusing. No mention of used libraries, not even package names. For example,… [Previous page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1064) [Next page](https://discuss.elastic.co/c/elastic-stack/81.md?page=1066)