# Latest **URL:** https://discuss.elastic.co/latest.md?page=1833 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1834 --- ## [Endpoint agent consistent 90+% CPU for some PCs](https://discuss.elastic.co/t/endpoint-agent-consistent-90-cpu-for-some-pcs/260693)
**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\ **Replies:** 15\ **Last updated:** [February 17, 2021, 4:03pm UTC](https://discuss.elastic.co/t/endpoint-agent-consistent-90-cpu-for-some-pcs/260693 "2021-02-17T16:03:37Z")
Hi, I have recently been rolling our the Elastic Endpoint Agent to some clients for testing. As part of the policy they are pushed Endpoint Security, System and Windows. For certain clients they are getting consistent… --- ## [Best Practice for Deploying Custom Metricset for Metricbeat](https://discuss.elastic.co/t/best-practice-for-deploying-custom-metricset-for-metricbeat/263811)
**Author:** [@traw1234](https://discuss.elastic.co/u/traw1234)\ **Replies:** 3\ **Last updated:** [February 16, 2021, 11:35pm UTC](https://discuss.elastic.co/t/best-practice-for-deploying-custom-metricset-for-metricbeat/263811 "2021-02-16T23:35:14Z")
I've created my own custom module to run in Metricbeat. My process locally (following this guide) was: clone https://github.com/elastic/beats run make create-metricset write the code in the metricset run mage update … --- ## [Elasticsearch 7.11 low heap size with bundled JDK](https://discuss.elastic.co/t/elasticsearch-7-11-low-heap-size-with-bundled-jdk/264576)
**Author:** [@MarcusCaepio](https://discuss.elastic.co/u/MarcusCaepio)\ **Replies:** 2\ **Last updated:** [February 17, 2021, 3:33pm UTC](https://discuss.elastic.co/t/elasticsearch-7-11-low-heap-size-with-bundled-jdk/264576 "2021-02-17T15:33:46Z")
Hi all, I am currently building a brand new cluster based on 7.11. In the docs under it is said that By default, Elasticsearch automatically sizes JVM heap based on a node’s roles and total memory. We recommend this… --- ## [Filebeat + logstash infinite loop](https://discuss.elastic.co/t/filebeat-logstash-infinite-loop/264595)
**Author:** [@Edi1](https://discuss.elastic.co/u/Edi1)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 3:39pm UTC](https://discuss.elastic.co/t/filebeat-logstash-infinite-loop/264595 "2021-02-17T15:39:41Z")
Hello. I am new to elasticsearch and I am trying to send json data with filebeat to logstash -\> elasticsearch. #filebeat.yml filebeat.inputs: - type: log enabled: true paths: - /var/log/json-data2.log json.me… --- ## [Curator instead of ILM to delete old indices](https://discuss.elastic.co/t/curator-instead-of-ilm-to-delete-old-indices/264186)
**Author:** [@Bruceclegg](https://discuss.elastic.co/u/Bruceclegg)\ **Replies:** 2\ **Last updated:** [February 17, 2021, 3:37pm UTC](https://discuss.elastic.co/t/curator-instead-of-ilm-to-delete-old-indices/264186 "2021-02-17T15:37:20Z")
I have been unable to use ILM to manage my indices. The developers have the index names hardcoded in their code and don't want to change the index names. I attempted to use curator and was only partially successful. I… --- ## [Caching hotel prices](https://discuss.elastic.co/t/caching-hotel-prices/264590)
**Author:** [@half](https://discuss.elastic.co/u/half)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 3:29pm UTC](https://discuss.elastic.co/t/caching-hotel-prices/264590 "2021-02-17T15:29:48Z")
We are building a hotel reservation system. There will be 5000 hotels and each hotel can have up to 10 room types. The rates for each room depend on selected dates and number of adults. We are planning to prepare precalc… --- ## [Finding count by distinct text row using Lens](https://discuss.elastic.co/t/finding-count-by-distinct-text-row-using-lens/264280)
**Author:** [@Chetan\_Madaan](https://discuss.elastic.co/u/Chetan_Madaan)\ **Replies:** 7\ **Last updated:** [February 17, 2021, 3:09pm UTC](https://discuss.elastic.co/t/finding-count-by-distinct-text-row-using-lens/264280 "2021-02-17T15:09:18Z")
Hello, I am very very new to this, Like up until 12 hours ago I hadn't even heard of elastic Search or Kibana. I do however have basic knowledge of SQL and Other Data visualization tools (including Data Studio and othe… --- ## [Helm charts for deploying with ECK](https://discuss.elastic.co/t/helm-charts-for-deploying-with-eck/263370)
**Author:** [@decd-TW](https://discuss.elastic.co/u/decd-TW)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 3:01pm UTC](https://discuss.elastic.co/t/helm-charts-for-deploying-with-eck/263370 "2021-02-17T15:01:59Z")
Hi, we're getting started with ECK and using helm to do the templating work. It looks like elastic provides helm charts for non-ECK resources: https://github.com/elastic/helm-charts Will elastic be releasing helm charts… --- ## [Issue after disk problem: java.lang.IllegalArgumentException: requested snapshot generation \[10\] is not available. Min referenced generation is \[11\]](https://discuss.elastic.co/t/issue-after-disk-problem-java-lang-illegalargumentexception-requested-snapshot-generation-10-is-not-available-min-referenced-generation-is-11/264305)
**Author:** [@nico127](https://discuss.elastic.co/u/nico127)\ **Replies:** 6\ **Last updated:** [February 17, 2021, 3:01pm UTC](https://discuss.elastic.co/t/issue-after-disk-problem-java-lang-illegalargumentexception-requested-snapshot-generation-10-is-not-available-min-referenced-generation-is-11/264305 "2021-02-17T15:01:18Z")
Hi. We've had a disk problem last night, causing a whole slew of issues in our Elasticsearch cluster. We've been able to resolve all of them but one: 1 (replica-less) shard is problematic. However, this is an issue we ha… --- ## [Elasticsearch does not send logs to filebeat and/or Logstash](https://discuss.elastic.co/t/elasticsearch-does-not-send-logs-to-filebeat-and-or-logstash/264405)
**Author:** [@Royal](https://discuss.elastic.co/u/Royal)\ **Replies:** 11\ **Last updated:** [February 17, 2021, 2:56pm UTC](https://discuss.elastic.co/t/elasticsearch-does-not-send-logs-to-filebeat-and-or-logstash/264405 "2021-02-17T14:56:11Z")
Our situation is as follows: We have a Kubernetes Cluster with a lot of logs piling up. We would like to get a centralized place for the logs to query through. This centralized place is a local VM, which has Elasticsearc… --- ## [Supporting retries on Close operation](https://discuss.elastic.co/t/supporting-retries-on-close-operation/263631)
**Author:** [@Evesy](https://discuss.elastic.co/u/Evesy)\ **Replies:** 2\ **Last updated:** [February 17, 2021, 2:40pm UTC](https://discuss.elastic.co/t/supporting-retries-on-close-operation/263631 "2021-02-17T14:40:36Z")
I was going to open a feature request/question on Github but was guided here instead. I was interested in Curator supporting retry\_count &retry\_interval for the close operation, similar to how it exists for delete\_snaps… --- ## [Token filter doesn't work on wildcard-search](https://discuss.elastic.co/t/token-filter-doesnt-work-on-wildcard-search/264588)
**Author:** [@TallGuru](https://discuss.elastic.co/u/TallGuru)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 2:31pm UTC](https://discuss.elastic.co/t/token-filter-doesnt-work-on-wildcard-search/264588 "2021-02-17T14:31:07Z")
Hi I'm trying to implement a filter to find compounded words and needs to combine it with wildcard-search but it doesn't work. Example case: There are documents with names "Coca-Cola", "Cocacola" and "Coca Cola". I wa… --- ## [Adding multi tenant encryption at rest](https://discuss.elastic.co/t/adding-multi-tenant-encryption-at-rest/264423)
**Author:** [@oriagranat9](https://discuss.elastic.co/u/oriagranat9)\ **Replies:** 5\ **Last updated:** [February 17, 2021, 2:28pm UTC](https://discuss.elastic.co/t/adding-multi-tenant-encryption-at-rest/264423 "2021-02-17T14:28:53Z")
hey everyone, at my job we want to add encryption at rest with multi tenant keys, like this plugin called elasticrypt did a long time ago. since this plugin is deprecated i wanted to know if it is still possible to do s… --- ## [How to not log extra metadata from Logstash to Elasticsearch](https://discuss.elastic.co/t/how-to-not-log-extra-metadata-from-logstash-to-elasticsearch/264524)
**Author:** [@arclinear](https://discuss.elastic.co/u/arclinear)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 1:40pm UTC](https://discuss.elastic.co/t/how-to-not-log-extra-metadata-from-logstash-to-elasticsearch/264524 "2021-02-17T13:40:22Z")
Hello, currently I have a working example of an ELK stack, however, in my indices I do not want to log the following fields : Ideally, in Elasticsearch, I only want to see "message" and "@timestamp", the other 4 is se… --- ## [Data table click event](https://discuss.elastic.co/t/data-table-click-event/264443)
**Author:** [@deeksha39](https://discuss.elastic.co/u/deeksha39)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 1:33pm UTC](https://discuss.elastic.co/t/data-table-click-event/264443 "2021-02-17T13:33:19Z")
Hi Everyone, I want to create a data table from kibana that shows aggregate result based on some categorical columns for e.g. aggregation based on zone, country, the city then show aggregation of numerical data for e.… --- ## [Parse json in string in json (nested json)](https://discuss.elastic.co/t/parse-json-in-string-in-json-nested-json/264569)
**Author:** [@Romanian\_Coder](https://discuss.elastic.co/u/Romanian_Coder)\ **Replies:** 3\ **Last updated:** [February 17, 2021, 1:03pm UTC](https://discuss.elastic.co/t/parse-json-in-string-in-json-nested-json/264569 "2021-02-17T13:03:42Z")
I have next json in input { "partitionId": 3, "value": { "name": "updatedPaymentInfo", "value": "{\\"reference\\":\\"Z091702210000015\\",\\"transactionId\\":\\"CC11702210000020\\",\\"amountDTO\\":{\\"value\\":10000,\\"c… --- ## [Stringo Lab issue - shipping-metrics-data](https://discuss.elastic.co/t/stringo-lab-issue-shipping-metrics-data/264563)
**Author:** [@Bhanu\_Singh](https://discuss.elastic.co/u/Bhanu_Singh)\ **Replies:** 3\ **Last updated:** [February 17, 2021, 12:49pm UTC](https://discuss.elastic.co/t/stringo-lab-issue-shipping-metrics-data/264563 "2021-02-17T12:49:32Z")
Hi, ssh server1 not working. Facing this issue for the last couple of days. I have attached few screenshots. --- ## [org.apache.lucene.store.AlreadyClosedException: this IndexWriter is closed](https://discuss.elastic.co/t/org-apache-lucene-store-alreadyclosedexception-this-indexwriter-is-closed/264551)
**Author:** [@Farzad\_Ebrahimi](https://discuss.elastic.co/u/Farzad_Ebrahimi)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 12:45pm UTC](https://discuss.elastic.co/t/org-apache-lucene-store-alreadyclosedexception-this-indexwriter-is-closed/264551 "2021-02-17T12:45:34Z")
Hi, we are doing single large index creation via java program on single elasticsearch node. after few millions of documents, we faced to this error: org.apache.lucene.store.AlreadyClosedException: this IndexWriter… --- ## [Multinode Cluster](https://discuss.elastic.co/t/multinode-cluster/264557)
**Author:** [@gafoc](https://discuss.elastic.co/u/gafoc)\ **Replies:** 1\ **Last updated:** [February 17, 2021, 12:30pm UTC](https://discuss.elastic.co/t/multinode-cluster/264557 "2021-02-17T12:30:22Z")
Hey can anyone help me setting up multi node cluster on 3 ubuntu machine making 1 as master node and the other two as slave node and injecting the data. --- ## [Lucene Total usage \< Fixed Bitsets usage?](https://discuss.elastic.co/t/lucene-total-usage-fixed-bitsets-usage/264564)
**Author:** [@val](https://discuss.elastic.co/u/val)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 12:08pm UTC](https://discuss.elastic.co/t/lucene-total-usage-fixed-bitsets-usage/264564 "2021-02-17T12:08:10Z")
When looking at the index memory statistics in Kibana, I currently see this: My question is pretty simple: How come the "Fixed Bitsets" memory usage is bigger than the "Lucene Total" memory usage, even though the for… --- ## [HEAP Memory usage over 90%](https://discuss.elastic.co/t/heap-memory-usage-over-90/264400)
**Author:** [@HammerZEIT](https://discuss.elastic.co/u/HammerZEIT)\ **Replies:** 4\ **Last updated:** [February 17, 2021, 11:46am UTC](https://discuss.elastic.co/t/heap-memory-usage-over-90/264400 "2021-02-17T11:46:04Z")
Hi everyone, I'm facing an issue with the memory usage of ES. We have a 5 nodes cluster to store our logs sent from graylog. I've searching and reading around for a week now I made some change on my configuration but … --- ## [Romanization keyword sorting (specifically Pinyin)](https://discuss.elastic.co/t/romanization-keyword-sorting-specifically-pinyin/264558)
**Author:** [@UserName3](https://discuss.elastic.co/u/UserName3)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 11:23am UTC](https://discuss.elastic.co/t/romanization-keyword-sorting-specifically-pinyin/264558 "2021-02-17T11:23:47Z")
Hi, Is sorting by Romanization, specifically Pinyin supported currently? It should be sorted along other languages with Roman alphabet, so the sorting results should be in an order like this: a, b, C, // ignore case j… --- ## [FileBeats -\> MSK : SSL handshake failed when TLS is enabled](https://discuss.elastic.co/t/filebeats-msk-ssl-handshake-failed-when-tls-is-enabled/264424)
**Author:** [@Ravi342883](https://discuss.elastic.co/u/Ravi342883)\ **Replies:** 2\ **Last updated:** [February 17, 2021, 11:16am UTC](https://discuss.elastic.co/t/filebeats-msk-ssl-handshake-failed-when-tls-is-enabled/264424 "2021-02-17T11:16:49Z")
Hi All.. I have created a MSK cluster with 3 brokers and enabled encryption at rest and in transit but disabled TLS authentication. I'm trying to send data from Filebeat (7.10.0) --\> AWS MSK over TLS endpoint (9094). … --- ## [\[SOLVED\] Whole cluster down after sorting on \_id](https://discuss.elastic.co/t/solved-whole-cluster-down-after-sorting-on-id/264445)
**Author:** [@voharunado](https://discuss.elastic.co/u/voharunado)\ **Replies:** 4\ **Last updated:** [February 17, 2021, 10:28am UTC](https://discuss.elastic.co/t/solved-whole-cluster-down-after-sorting-on-id/264445 "2021-02-17T10:28:31Z")
Hi, I just had a massive issue with my ES prod cluster. I use an ES plugin for IntelliJ IDE that allows to see search result as a table, which can be ordered by clicking on the columns: it then add a sort parameter corr… --- ## [Don't get doc count after setting ilm](https://discuss.elastic.co/t/dont-get-doc-count-after-setting-ilm/264117)
**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\ **Replies:** 5\ **Last updated:** [February 17, 2021, 10:25am UTC](https://discuss.elastic.co/t/dont-get-doc-count-after-setting-ilm/264117 "2021-02-17T10:25:06Z")
I am using two indices each index is pointed to ilm. below is the index setting for two indices "index": { "lifecycle": { "name": "packetbeat\_flow", "rollover\_alias": "log-pb-flow" }, "number\_o… --- ## [Persistent queue Issue on logstash](https://discuss.elastic.co/t/persistent-queue-issue-on-logstash/264546)
**Author:** [@iammanmale](https://discuss.elastic.co/u/iammanmale)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 10:10am UTC](https://discuss.elastic.co/t/persistent-queue-issue-on-logstash/264546 "2021-02-17T10:10:12Z")
We have three logstash nodes to collect log in parallel. All three logstash have 6 output pipelines and 1 intake pipeline. After i try to enable persistent queue on one of the logstash, no matter how little the queue\_max… --- ## [Multiple Elapsed](https://discuss.elastic.co/t/multiple-elapsed/264459)
**Author:** [@artobstrel](https://discuss.elastic.co/u/artobstrel)\ **Replies:** 2\ **Last updated:** [February 17, 2021, 10:05am UTC](https://discuss.elastic.co/t/multiple-elapsed/264459 "2021-02-17T10:05:11Z")
I want to measure the duration of several events within a single transaction. I use a elapsed filter for this. My data and logstash config file is below: data file2021-02-16 16:00:00 016cbeb4 Input 2021-02-16 1… --- ## [Ingress Could not find the endpoints](https://discuss.elastic.co/t/ingress-could-not-find-the-endpoints/264238)
**Author:** [@Ahmed\_Abdulaleem](https://discuss.elastic.co/u/Ahmed_Abdulaleem)\ **Replies:** 2\ **Last updated:** [February 16, 2021, 1:32pm UTC](https://discuss.elastic.co/t/ingress-could-not-find-the-endpoints/264238 "2021-02-16T13:32:17Z")
I installed Elasticsearch with helm and nginx-ingress as nginx controller I added the ingress like that but when I check the ingress found this error why ingress resource could not find the endpoints --- ## [NEST Client - Mapping, aggregations, search for dynamic properties/attributes of a model](https://discuss.elastic.co/t/nest-client-mapping-aggregations-search-for-dynamic-properties-attributes-of-a-model/264544)
**Author:** [@krishnapss](https://discuss.elastic.co/u/krishnapss)\ **Replies:** 0\ **Last updated:** [February 17, 2021, 9:44am UTC](https://discuss.elastic.co/t/nest-client-mapping-aggregations-search-for-dynamic-properties-attributes-of-a-model/264544 "2021-02-17T09:44:34Z")
Hi, Could someone please help me to solve this problem. We are trying to integrate elasticsearch in our project using NEST Client. For our project we will have different schema per customer or product. e.g. cars, boo… --- ## [Kibana run very slow in mozilla firefox](https://discuss.elastic.co/t/kibana-run-very-slow-in-mozilla-firefox/264521)
**Author:** [@radragar](https://discuss.elastic.co/u/radragar)\ **Replies:** 2\ **Last updated:** [February 17, 2021, 8:43am UTC](https://discuss.elastic.co/t/kibana-run-very-slow-in-mozilla-firefox/264521 "2021-02-17T08:43:22Z")
Hello, Im try install kibana in production environment, with 3 node elasticsearch. 1 master and 2 datanode. but when im running kibana in mozilla firefox, its running very slow. how kibana running very slow in mozilla… [Previous page](https://discuss.elastic.co/latest.md?page=1832) [Next page](https://discuss.elastic.co/latest.md?page=1834)