# Latest **URL:** https://discuss.elastic.co/latest.md?page=1811 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1812 --- ## [Does Elasticsearch fit my project?](https://discuss.elastic.co/t/does-elasticsearch-fit-my-project/265721)
**Author:** [@duck](https://discuss.elastic.co/u/duck)\ **Replies:** 3\ **Last updated:** [February 28, 2021, 3:12pm UTC](https://discuss.elastic.co/t/does-elasticsearch-fit-my-project/265721 "2021-02-28T15:12:42Z")
Hi, I've been working on a project for a while. Recently, we've decided to build a system for logging and analyzing. About Project It's an online game project and type is MMORPG. Since it's a MMORPG, there'd be billion… --- ## [Elasticsearch voter\_only instance is taking 50% memory usage](https://discuss.elastic.co/t/elasticsearch-voter-only-instance-is-taking-50-memory-usage/265715)
**Author:** [@MCRBEm](https://discuss.elastic.co/u/MCRBEm)\ **Replies:** 2\ **Last updated:** [February 28, 2021, 1:41pm UTC](https://discuss.elastic.co/t/elasticsearch-voter-only-instance-is-taking-50-memory-usage/265715 "2021-02-28T13:41:42Z")
Hello everyone. Need some help to understand high memory issue we have and possibly fixed/improve our elastic stack setup (without adding new server). We were given only 2 servers to install elasticsearch and we must se… --- ## [Virtualization Error](https://discuss.elastic.co/t/virtualization-error/265455)
**Author:** [@Farid\_N](https://discuss.elastic.co/u/Farid_N)\ **Replies:** 2\ **Last updated:** [February 28, 2021, 12:21pm UTC](https://discuss.elastic.co/t/virtualization-error/265455 "2021-02-28T12:21:15Z")
Hi Unfortunately, when I want to visual some dashboards I face with the error bellow multiple times (See this error by every time I refresh the page) Do you have any idea?!? --- ## [How to generate ssl certificate for new node in existing cluster](https://discuss.elastic.co/t/how-to-generate-ssl-certificate-for-new-node-in-existing-cluster/265689)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 2\ **Last updated:** [February 28, 2021, 11:56am UTC](https://discuss.elastic.co/t/how-to-generate-ssl-certificate-for-new-node-in-existing-cluster/265689 "2021-02-28T11:56:14Z")
I have 7 node cluster and now i want to add another node for previous nodes i have master\_node1.crt and master\_node1.key master\_node2.crt and master\_node2.key master\_node3.crt and master\_node3.key data\_node1.crt and da… --- ## [Godaddy SSL Wildcard Certificate](https://discuss.elastic.co/t/godaddy-ssl-wildcard-certificate/265503)
**Author:** [@francescouk](https://discuss.elastic.co/u/francescouk)\ **Replies:** 2\ **Last updated:** [February 28, 2021, 11:52am UTC](https://discuss.elastic.co/t/godaddy-ssl-wildcard-certificate/265503 "2021-02-28T11:52:54Z")
Hello there, I´m trying to use my godaddy wildcard ssl on elk stack but for some reason is not working. Can someone point me to the right direction? Follow my config: xpack.security.transport.ssl.enabled: true xpack.sec… --- ## [Pipeline aggregation on average aggregation](https://discuss.elastic.co/t/pipeline-aggregation-on-average-aggregation/265718)
**Author:** [@zagmon](https://discuss.elastic.co/u/zagmon)\ **Replies:** 0\ **Last updated:** [February 28, 2021, 11:35am UTC](https://discuss.elastic.co/t/pipeline-aggregation-on-average-aggregation/265718 "2021-02-28T11:35:05Z")
Hello, Having index contain these fields: user\_id and score (integer between 0-100). Need to do the following: 1. Calculate average score per user. 2. Create 4 buckets with the count of users score: Bucket 1: users wi… --- ## [How to check if the response time is correct?](https://discuss.elastic.co/t/how-to-check-if-the-response-time-is-correct/265497)
**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\ **Replies:** 1\ **Last updated:** [February 28, 2021, 7:39am UTC](https://discuss.elastic.co/t/how-to-check-if-the-response-time-is-correct/265497 "2021-02-28T07:39:04Z")
Hi, I was comparing the response time that elastic APM shows, and the one that new relics APM shows, and there is a diference of 300 ms, is there a way to make shure that the values in response time that APM is giving a… --- ## [Add java.util.logging to supported technologies list (documentation)](https://discuss.elastic.co/t/add-java-util-logging-to-supported-technologies-list-documentation/265624)
**Author:** [@NickWe](https://discuss.elastic.co/u/NickWe)\ **Replies:** 1\ **Last updated:** [February 28, 2021, 7:31am UTC](https://discuss.elastic.co/t/add-java-util-logging-to-supported-technologies-list-documentation/265624 "2021-02-28T07:31:45Z")
Hi, Since Release 0.5.0 of the Java ECS formatter enable\_log\_correlation is working with Java Util Logging as well, provided that SLF4J is on the classpath as a MDC supplier. Maybe the documentation can be updated to r… --- ## [Using my own time field instead of the @timestamp automatically added by Filebeat](https://discuss.elastic.co/t/using-my-own-time-field-instead-of-the-timestamp-automatically-added-by-filebeat/265709)
**Author:** [@snowfrogdev](https://discuss.elastic.co/u/snowfrogdev)\ **Replies:** 1\ **Last updated:** [February 28, 2021, 3:52am UTC](https://discuss.elastic.co/t/using-my-own-time-field-instead-of-the-timestamp-automatically-added-by-filebeat/265709 "2021-02-28T03:52:02Z")
I'm using the http\_endpoint input with Filebeat. I wanna use the timestamp field from my JSON payload instead of the @timestamp that Filebeat seems to add automatically. filebeat.inputs: - type: http\_endpoint ena… --- ## [Getting CLA not signed error on my PR, when I have signed it](https://discuss.elastic.co/t/getting-cla-not-signed-error-on-my-pr-when-i-have-signed-it/256973)
**Author:** [@baba\_yaga](https://discuss.elastic.co/u/baba_yaga)\ **Replies:** 6\ **Last updated:** [February 28, 2021, 2:26am UTC](https://discuss.elastic.co/t/getting-cla-not-signed-error-on-my-pr-when-i-have-signed-it/256973 "2021-02-28T02:26:56Z")
Hi, I submitted a pull request for adding a feature requested in the issue.I have signed the CLA for Elastic already but the bot still hasn't detected that and it prevents me from requesting a review and get my pull req… --- ## [Count of not unique term's](https://discuss.elastic.co/t/count-of-not-unique-terms/265246)
**Author:** [@artobstrel](https://discuss.elastic.co/u/artobstrel)\ **Replies:** 8\ **Last updated:** [February 28, 2021, 2:41am UTC](https://discuss.elastic.co/t/count-of-not-unique-terms/265246 "2021-02-28T02:41:51Z")
There is my sample dataset: I can get a list of not unique text's in the table: source{ "aggs": { "2": { "terms": { "field": "text.keyword", … --- ## [Filebeat http endpoint message doesn't show up in Log](https://discuss.elastic.co/t/filebeat-http-endpoint-message-doesnt-show-up-in-log/265704)
**Author:** [@snowfrogdev](https://discuss.elastic.co/u/snowfrogdev)\ **Replies:** 1\ **Last updated:** [February 28, 2021, 12:40am UTC](https://discuss.elastic.co/t/filebeat-http-endpoint-message-doesnt-show-up-in-log/265704 "2021-02-28T00:40:33Z")
This is what I get: This is my request: This is my config file: filebeat.inputs: - type: http\_endpoint enabled: true listen\_address: filebeat listen\_port: 8088 response\_code: 200 output.elastics… --- ## [How much disk and memory is my Elasticsearch using and occupying?](https://discuss.elastic.co/t/how-much-disk-and-memory-is-my-elasticsearch-using-and-occupying/263926)
**Author:** [@mahalabobis](https://discuss.elastic.co/u/mahalabobis)\ **Replies:** 3\ **Last updated:** [February 28, 2021, 12:59am UTC](https://discuss.elastic.co/t/how-much-disk-and-memory-is-my-elasticsearch-using-and-occupying/263926 "2021-02-28T00:59:27Z")
I'm trying to determine my hardware needs. So I want to find exactly how much memory and disk space am I using and occupying. What are the commands to use? --- ## [Configure metricbeat to use logstash--tutorial error?](https://discuss.elastic.co/t/configure-metricbeat-to-use-logstash-tutorial-error/265143)
**Author:** [@John\_McDonnell](https://discuss.elastic.co/u/John_McDonnell)\ **Replies:** 3\ **Last updated:** [February 27, 2021, 11:59pm UTC](https://discuss.elastic.co/t/configure-metricbeat-to-use-logstash-tutorial-error/265143 "2021-02-27T23:59:39Z")
I've set up a 7.11 Kibana-Elastisearch-Logstash-Beats stack more-or-less successfully, but I am unable to configure metricbeat to use logstash. (I am able to see metricbeat data sending it directly to elastisearch.) F… --- ## [Updating Elasticsearch Document](https://discuss.elastic.co/t/updating-elasticsearch-document/265705)
**Author:** [@vstevenson](https://discuss.elastic.co/u/vstevenson)\ **Replies:** 1\ **Last updated:** [February 27, 2021, 10:46pm UTC](https://discuss.elastic.co/t/updating-elasticsearch-document/265705 "2021-02-27T22:46:43Z")
I am running into trouble when I try to update a field within my document. Here's my JSON call: POST vs-users/\_update/bwMNiyZZMg4jZVMdueaZ6m { "name": "abc" } I get this error: { "error" :… --- ## [Indices are not allocate in hot nodes](https://discuss.elastic.co/t/indices-are-not-allocate-in-hot-nodes/265609)
**Author:** [@testsemd\_email](https://discuss.elastic.co/u/testsemd_email)\ **Replies:** 3\ **Last updated:** [February 27, 2021, 9:21pm UTC](https://discuss.elastic.co/t/indices-are-not-allocate-in-hot-nodes/265609 "2021-02-27T21:21:11Z")
I have defined, data\_hot, data\_warm roles in the elastic cluster nodes as below. node1, node2c- node.roles: \[ "data\_content", "ingest", "data\_hot" \] node3, node4 - node.roles: \[ "data\_content", "data\_hot" \] node5, nod… --- ## [Elastic Cloud Log Archiving Recommendations](https://discuss.elastic.co/t/elastic-cloud-log-archiving-recommendations/264532)
**Author:** [@dandrejvv](https://discuss.elastic.co/u/dandrejvv)\ **Replies:** 8\ **Last updated:** [February 27, 2021, 8:15pm UTC](https://discuss.elastic.co/t/elastic-cloud-log-archiving-recommendations/264532 "2021-02-27T20:15:55Z")
We recently moved to the Elastic Stack on the Elastic Cloud but we have a very minimal setup and would like to ask for guidance and recommendations as to how to go about archiving logs without doing anything unnecessaril… --- ## [Fork AWS](https://discuss.elastic.co/t/fork-aws/261989)
**Author:** [@rbeg](https://discuss.elastic.co/u/rbeg)\ **Replies:** 16\ **Last updated:** [February 27, 2021, 7:43pm UTC](https://discuss.elastic.co/t/fork-aws/261989 "2021-02-27T19:43:25Z")
Bonjour, Qui peut m’expliquer brievement le conflit entre elastic et aws ? C’est quoi cette histoire de license ? Lien : --- ## [X509 Certificate Error for Fleet Enrollment](https://discuss.elastic.co/t/x509-certificate-error-for-fleet-enrollment/264461)
**Author:** [@secopsgeek](https://discuss.elastic.co/u/secopsgeek)\ **Replies:** 4\ **Last updated:** [February 27, 2021, 6:59pm UTC](https://discuss.elastic.co/t/x509-certificate-error-for-fleet-enrollment/264461 "2021-02-27T18:59:26Z")
Hello friends, I am needing some help with setting up the fleet enrollment for my clients on windows systems. Am having an issue with this EDR portion of the SIEM build. Any help would be nice, I have the cert, but not … --- ## [Apm-agent service\_name as macro/variable](https://discuss.elastic.co/t/apm-agent-service-name-as-macro-variable/265632)
**Author:** [@rufik](https://discuss.elastic.co/u/rufik)\ **Replies:** 1\ **Last updated:** [February 27, 2021, 6:50pm UTC](https://discuss.elastic.co/t/apm-agent-service-name-as-macro-variable/265632 "2021-02-27T18:50:33Z")
Is it possible to use some kind of variable/macro for elastic.apm.service\_name option? I have java app running on many machines, one app per one machine. Leaving this option empty causes to show the same "Service Name" … --- ## [Log stash schema less input fields](https://discuss.elastic.co/t/log-stash-schema-less-input-fields/265681)
**Author:** [@ali\_ghorbani](https://discuss.elastic.co/u/ali_ghorbani)\ **Replies:** 1\ **Last updated:** [February 27, 2021, 4:41pm UTC](https://discuss.elastic.co/t/log-stash-schema-less-input-fields/265681 "2021-02-27T16:41:49Z")
Hi, I'm new in log-stash what I trying to do is to store my request and response JSON of my web app into the elastic search using log-stash with no change in their JSON format. the problem is a field named start\_time i… --- ## [Filebeat logstash loadbalance to kafka](https://discuss.elastic.co/t/filebeat-logstash-loadbalance-to-kafka/265695)
**Author:** [@cool](https://discuss.elastic.co/u/cool)\ **Replies:** 1\ **Last updated:** [February 27, 2021, 4:14pm UTC](https://discuss.elastic.co/t/filebeat-logstash-loadbalance-to-kafka/265695 "2021-02-27T16:14:22Z")
How to send logs from filebeat/logstash to kafak to multiple datacenters if one datacenter is down logs to be sent to another datacenter. --- ## [Elastic Agent](https://discuss.elastic.co/t/elastic-agent/265670)
**Author:** [@Cosmin\_Ciobanu1](https://discuss.elastic.co/u/Cosmin_Ciobanu1)\ **Replies:** 1\ **Last updated:** [February 27, 2021, 3:27pm UTC](https://discuss.elastic.co/t/elastic-agent/265670 "2021-02-27T15:27:08Z")
Hi! I try to install Elastic Agent on my Windows and I have Elastic Stack on Ubuntu, but I have a big issue. "Certificate is valid for 10.10.10.19, not 10.10.10.19" is my error. It seem pretty sus. Any idea? Thank … --- ## [Detection not finding anything but same query finds them](https://discuss.elastic.co/t/detection-not-finding-anything-but-same-query-finds-them/265535)
**Author:** [@plaroche0](https://discuss.elastic.co/u/plaroche0)\ **Replies:** 5\ **Last updated:** [February 27, 2021, 1:57pm UTC](https://discuss.elastic.co/t/detection-not-finding-anything-but-same-query-finds-them/265535 "2021-02-27T13:57:39Z")
I made a detection from a saved query that shows what I want to detect but the detection is not detecting anything. Detection does not show any failures. Any suggestions? --- ## [Logstash split message by \\n into multiple message inputs](https://discuss.elastic.co/t/logstash-split-message-by-n-into-multiple-message-inputs/265620)
**Author:** [@Daniel\_Jankech](https://discuss.elastic.co/u/Daniel_Jankech)\ **Replies:** 1\ **Last updated:** [February 27, 2021, 1:08pm UTC](https://discuss.elastic.co/t/logstash-split-message-by-n-into-multiple-message-inputs/265620 "2021-02-27T13:08:40Z")
Hi , what im trying to do is pretty simple and straight forward but cant figure out why its not working. When I was using logstash with file input it parsed my logs correctly meaning that it separated my log file by \\n i… --- ## [How to execute a stored script in a search query](https://discuss.elastic.co/t/how-to-execute-a-stored-script-in-a-search-query/265514)
**Author:** [@rschirin](https://discuss.elastic.co/u/rschirin)\ **Replies:** 3\ **Last updated:** [February 27, 2021, 12:48pm UTC](https://discuss.elastic.co/t/how-to-execute-a-stored-script-in-a-search-query/265514 "2021-02-27T12:48:41Z")
hey there, I created a stored script that should add a new field to all the docs into an index. POST \_scripts/set\_new\_field { "script": { "lang": "painless", "source": """ if (ctx.\_source.speaker == "TED… --- ## [Elasticsearch - Timestamp based document Upsert](https://discuss.elastic.co/t/elasticsearch-timestamp-based-document-upsert/265688)
**Author:** [@tag\_v](https://discuss.elastic.co/u/tag_v)\ **Replies:** 0\ **Last updated:** [February 27, 2021, 11:34am UTC](https://discuss.elastic.co/t/elasticsearch-timestamp-based-document-upsert/265688 "2021-02-27T11:34:45Z")
I am looking for more efficient and performance way to implement below use case: Every input JSON contains event\_timestamp and document\_id field. document\_id is '\_id' for the index. If a document with document\_id alre… --- ## [Cannot create index from news Data showcased in https://www.youtube.com/watch?v=CCTgroOcyfM&t=1315s](https://discuss.elastic.co/t/cannot-create-index-from-news-data-showcased-in-https-www-youtube-com-watch-v-cctgroocyfm-t-1315s/265687)
**Author:** [@sushicodee](https://discuss.elastic.co/u/sushicodee)\ **Replies:** 0\ **Last updated:** [February 27, 2021, 11:10am UTC](https://discuss.elastic.co/t/cannot-create-index-from-news-data-showcased-in-https-www-youtube-com-watch-v-cctgroocyfm-t-1315s/265687 "2021-02-27T11:10:49Z")
the error which i get from kibana is Error creating index \[mapper\_parsing\_exception\] No type specified for field \[properties\] More {"error":{"root\_cause":\[{"type":"mapper\_parsing\_exception","reason":"No type specifie… --- ## [Secured beats in a docker container](https://discuss.elastic.co/t/secured-beats-in-a-docker-container/265682)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 1\ **Last updated:** [February 27, 2021, 7:21am UTC](https://discuss.elastic.co/t/secured-beats-in-a-docker-container/265682 "2021-02-27T07:21:19Z")
Hi there, how is the approach to create a secured metricbeat docker container to send data to a secured elastick stack? Background: I have a secured stack, with self signed certificate authority in place. Now I would… --- ## [Best blueprint/architecture/best practice to monitor Logstash pipelines with alerts in Kibana?](https://discuss.elastic.co/t/best-blueprint-architecture-best-practice-to-monitor-logstash-pipelines-with-alerts-in-kibana/265677)
**Author:** [@byteandbit](https://discuss.elastic.co/u/byteandbit)\ **Replies:** 0\ **Last updated:** [February 27, 2021, 3:57am UTC](https://discuss.elastic.co/t/best-blueprint-architecture-best-practice-to-monitor-logstash-pipelines-with-alerts-in-kibana/265677 "2021-02-27T03:57:31Z")
Hello, We are looking for best practice to monitor our Logstash (several pipelines with various input and output plugins) and alert via Slack or eMail in case of problems. Do we just read Logstash logs? If so again wha… [Previous page](https://discuss.elastic.co/latest.md?page=1810) [Next page](https://discuss.elastic.co/latest.md?page=1812)