# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1883 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1884 --- ## [Probable memory leak: Heap utilization stuck at ~max heap for idle cluster](https://discuss.elastic.co/t/probable-memory-leak-heap-utilization-stuck-at-max-heap-for-idle-cluster/193785)
**Author:** [@pokaleshrey](https://discuss.elastic.co/u/pokaleshrey)\ **Replies:** 9\ **Last updated:** [September 21, 2019, 10:39am UTC](https://discuss.elastic.co/t/probable-memory-leak-heap-utilization-stuck-at-max-heap-for-idle-cluster/193785 "2019-09-21T10:39:05Z")
Cluster setup : Version : 7.1.1 3 master node 3 data node (16core, 64Mb Ram, Xms=Xmx=12Gb each) 2 coordinating node 650 indexes with a shard each. Total data=~2Tb Query: All my data nodes are stuck at ~10Gb heap u… --- ## [Kibana error 403 forbidden](https://discuss.elastic.co/t/kibana-error-403-forbidden/200383)
**Author:** [@katara](https://discuss.elastic.co/u/katara)\ **Replies:** 2\ **Last updated:** [September 21, 2019, 8:55am UTC](https://discuss.elastic.co/t/kibana-error-403-forbidden/200383 "2019-09-21T08:55:17Z")
Hi, I just setup my xpack in elasticsearch 7.1.0 and changed all my built-in user passwords. this is the change i made in Kibana.yml xpack.security.enabled: true elasticsearch.username: "kibana" elasticsearch.password… --- ## [Kibana - Drill down - reusing filters from URL](https://discuss.elastic.co/t/kibana-drill-down-reusing-filters-from-url/200393)
**Author:** [@rpreseck](https://discuss.elastic.co/u/rpreseck)\ **Replies:** 2\ **Last updated:** [September 21, 2019, 8:55am UTC](https://discuss.elastic.co/t/kibana-drill-down-reusing-filters-from-url/200393 "2019-09-21T08:55:00Z")
Hello everyone. To deal with the technical details, version of Kibana that I am using is 7.3.1. I am experimenting with drill down capabilities of Kibana. From what I have managed to find, a way to do it in Kibana is … --- ## [Ingesting only new documents from Elasticsearch](https://discuss.elastic.co/t/ingesting-only-new-documents-from-elasticsearch/200520)
**Author:** [@eebee](https://discuss.elastic.co/u/eebee)\ **Replies:** 0\ **Last updated:** [September 21, 2019, 8:50am UTC](https://discuss.elastic.co/t/ingesting-only-new-documents-from-elasticsearch/200520 "2019-09-21T08:50:30Z")
I'm using the elasticsearch input plugin to get documents from another elasticsearch instance. Then the elasticsearch output plugin to ingest it in another instance. But how do I schedule/filter the plugins/pipeline, so… --- ## [Cluster-issue with import and query at same time](https://discuss.elastic.co/t/cluster-issue-with-import-and-query-at-same-time/200518)
**Author:** [@Yashwantbokadia](https://discuss.elastic.co/u/Yashwantbokadia)\ **Replies:** 1\ **Last updated:** [September 21, 2019, 7:35am UTC](https://discuss.elastic.co/t/cluster-issue-with-import-and-query-at-same-time/200518 "2019-09-21T07:35:46Z")
Hello All, I'm importing data on my cluster using elasticdump in bulk, I want to run query on Cluster while the import is going on, but when I do that, the import stops with an error "heap out of memory". I want to comp… --- ## [Related to node query cache](https://discuss.elastic.co/t/related-to-node-query-cache/200516)
**Author:** [@Yashwantbokadia](https://discuss.elastic.co/u/Yashwantbokadia)\ **Replies:** 0\ **Last updated:** [September 21, 2019, 7:18am UTC](https://discuss.elastic.co/t/related-to-node-query-cache/200516 "2019-09-21T07:18:25Z")
How to disable Filter cache in elasticsearch-6.7? if possible give the complete details on how to do that. Thanks in advance. --- ## [Netflow](https://discuss.elastic.co/t/netflow/200511)
**Author:** [@Vikash\_Singh1](https://discuss.elastic.co/u/Vikash_Singh1)\ **Replies:** 0\ **Last updated:** [September 21, 2019, 6:05am UTC](https://discuss.elastic.co/t/netflow/200511 "2019-09-21T06:05:53Z")
I have configured and deployed netflow plugin successfully using logstash....But in the logs I am not getting any data related to local traffic...i.e. if two pc are transferring any data in the same network then should i… --- ## [Case-sensitive search and custom analyzer](https://discuss.elastic.co/t/case-sensitive-search-and-custom-analyzer/200399)
**Author:** [@Mohammad.ali](https://discuss.elastic.co/u/Mohammad.ali)\ **Replies:** 2\ **Last updated:** [September 20, 2019, 2:05pm UTC](https://discuss.elastic.co/t/case-sensitive-search-and-custom-analyzer/200399 "2019-09-20T14:05:15Z")
Hello every one I have been trying to activate case sensitive search in elasticsearch and what i found is it depend on type of analyzer. so i create a custom analyzer: PUT test\_index { "settings": { "analysis": { "… --- ## [Beats to Logstash?](https://discuss.elastic.co/t/beats-to-logstash/200503)
**Author:** [@SteveP](https://discuss.elastic.co/u/SteveP)\ **Replies:** 2\ **Last updated:** [September 21, 2019, 1:34am UTC](https://discuss.elastic.co/t/beats-to-logstash/200503 "2019-09-21T01:34:13Z")
If I am taking in data from Beats do I need to go through Logstash to Elasticsearch or can I go directly to Elasticsearch and then visualize it in Kibana? I am bit confused as to how Logstash fits into Beats. --- ## [Kibana Aggregation to get counts with Top Hit](https://discuss.elastic.co/t/kibana-aggregation-to-get-counts-with-top-hit/200496)
**Author:** [@stephenchoy](https://discuss.elastic.co/u/stephenchoy)\ **Replies:** 4\ **Last updated:** [September 21, 2019, 12:46am UTC](https://discuss.elastic.co/t/kibana-aggregation-to-get-counts-with-top-hit/200496 "2019-09-21T00:46:47Z")
I would like to create a metric that counts the number of hosts running different software versions. The tricky part is that each host regularly report its current versions to the ES. The version field changed as the so… --- ## [What happens when we do service elasticsearch stop](https://discuss.elastic.co/t/what-happens-when-we-do-service-elasticsearch-stop/200294)
**Author:** [@Parvez](https://discuss.elastic.co/u/Parvez)\ **Replies:** 3\ **Last updated:** [September 21, 2019, 12:29am UTC](https://discuss.elastic.co/t/what-happens-when-we-do-service-elasticsearch-stop/200294 "2019-09-21T00:29:40Z")
I have 3 node cluster configure in AWS Cloud which has ASG enable as shown in image below . Let say \[ node-1, node-2, node3\] are the 3 nodes and are hosted under same vpc subnet on different ip's. When i login to one … --- ## [Scroll setting on reindex task](https://discuss.elastic.co/t/scroll-setting-on-reindex-task/200500)
**Author:** [@viniciof](https://discuss.elastic.co/u/viniciof)\ **Replies:** 0\ **Last updated:** [September 20, 2019, 10:08pm UTC](https://discuss.elastic.co/t/scroll-setting-on-reindex-task/200500 "2019-09-20T22:08:37Z")
Hi all, I'm looking at this doc: Scroll | Elasticsearch Reference \[5.6\] | Elastic Scroll While a search request returns a single “page” of results, the scroll API can be used to retrieve large numbers of results (… --- ## [In which order matched\_queries are reported?](https://discuss.elastic.co/t/in-which-order-matched-queries-are-reported/200498)
**Author:** [@germax](https://discuss.elastic.co/u/germax)\ **Replies:** 0\ **Last updated:** [September 20, 2019, 9:52pm UTC](https://discuss.elastic.co/t/in-which-order-matched-queries-are-reported/200498 "2019-09-20T21:52:02Z")
Names of named queries are written to "matched\_queries" field in the search output. Is it true that the order of names corresponds to the score the named query has? After some testing it seems sorted (highest -\> lowest) … --- ## [Ansbile Cache Integration for Elasticsearch](https://discuss.elastic.co/t/ansbile-cache-integration-for-elasticsearch/200472)
**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 9:28pm UTC](https://discuss.elastic.co/t/ansbile-cache-integration-for-elasticsearch/200472 "2019-09-20T21:28:41Z")
Hi Folks, I recently create a Elasticsearch Cache PLUGIN for Ansibile. https://github.com/eperry/ansible-plugin-cache-elasticsearch What this does this do for you. When ansibile runs and gathers "Facts". Those facts … --- ## [How to match two logs in Kibana](https://discuss.elastic.co/t/how-to-match-two-logs-in-kibana/200460)
**Author:** [@Dani\_Ruse](https://discuss.elastic.co/u/Dani_Ruse)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 8:53pm UTC](https://discuss.elastic.co/t/how-to-match-two-logs-in-kibana/200460 "2019-09-20T20:53:58Z")
Hello! I have in Kibana some logs with the following message formats: "Process started with id 5" and "Process ended with id 5". What I want is to match the two logs based on the id found in the message field and then… --- ## [Kibana apply a timezone math to my datefield](https://discuss.elastic.co/t/kibana-apply-a-timezone-math-to-my-datefield/200482)
**Author:** [@Denis\_Galvao](https://discuss.elastic.co/u/Denis_Galvao)\ **Replies:** 2\ **Last updated:** [September 20, 2019, 7:45pm UTC](https://discuss.elastic.co/t/kibana-apply-a-timezone-math-to-my-datefield/200482 "2019-09-20T19:45:18Z")
My datefield is correctly inserted on the elastic docs, but kibana apply a timezone to them. for ex.: datefield on kibana: Sep 20, 2019 @ 13:27:12.000 datefield on elastic: Sep 20, 2019 @ 16:27:12.000 Is there a way … --- ## [Wildcard and filter in watcher](https://discuss.elastic.co/t/wildcard-and-filter-in-watcher/200481)
**Author:** [@t3fsx](https://discuss.elastic.co/u/t3fsx)\ **Replies:** 0\ **Last updated:** [September 20, 2019, 7:29pm UTC](https://discuss.elastic.co/t/wildcard-and-filter-in-watcher/200481 "2019-09-20T19:29:10Z")
"query": { "bool": { "filter": \[ { "term": { "event.type": "fruits" } }, { "term": { "fruit"… --- ## [Unable to fetch metrics from AWS/ECS - Cloudwatch input plugin](https://discuss.elastic.co/t/unable-to-fetch-metrics-from-aws-ecs-cloudwatch-input-plugin/200477)
**Author:** [@Arpan\_Patnaik](https://discuss.elastic.co/u/Arpan_Patnaik)\ **Replies:** 0\ **Last updated:** [September 20, 2019, 7:10pm UTC](https://discuss.elastic.co/t/unable-to-fetch-metrics-from-aws-ecs-cloudwatch-input-plugin/200477 "2019-09-20T19:10:53Z")
Hi All, I have been trying to get the cloudwatch input plugin working with the AWS/ECS metrics, but I have been unable to get any data out. There are strangely no errors, but no data is picked up my the plugin either. P… --- ## [Kibana Autocomplete in 7.1.1](https://discuss.elastic.co/t/kibana-autocomplete-in-7-1-1/200432)
**Author:** [@Kevin\_Bourne](https://discuss.elastic.co/u/Kevin_Bourne)\ **Replies:** 2\ **Last updated:** [September 20, 2019, 7:11pm UTC](https://discuss.elastic.co/t/kibana-autocomplete-in-7-1-1/200432 "2019-09-20T19:11:47Z")
Does autocomplete in Dev Tools work in v7.1.1? I have turned on everything I have read about within the UI but nothing works. I type "GET \_c" and nothing comes up. I have a v5.5 that comes up with all the \_cat options wh… --- ## [How to use a dashboard with a different index pattern](https://discuss.elastic.co/t/how-to-use-a-dashboard-with-a-different-index-pattern/200434)
**Author:** [@salomaoAndrade](https://discuss.elastic.co/u/salomaoAndrade)\ **Replies:** 8\ **Last updated:** [September 20, 2019, 7:00pm UTC](https://discuss.elastic.co/t/how-to-use-a-dashboard-with-a-different-index-pattern/200434 "2019-09-20T19:00:55Z")
I have an index with a dashboard i have set up for it. When i create a new index and create a new user with permissions to only read a second index, i can still see the dashboard i created for the first index, but i can'… --- ## [Aggregations for dynamic key value pairs](https://discuss.elastic.co/t/aggregations-for-dynamic-key-value-pairs/200083)
**Author:** [@bkdavis](https://discuss.elastic.co/u/bkdavis)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 6:47pm UTC](https://discuss.elastic.co/t/aggregations-for-dynamic-key-value-pairs/200083 "2019-09-20T18:47:20Z")
Trying to figure out the best way to 'count' values for aggregating dynamic data. For instance the 2 records below is a sampling of data where 'key' data is not static. Some records may have height:21 and width:28 whil… --- ## [Kibana automatic report generation of saved Object](https://discuss.elastic.co/t/kibana-automatic-report-generation-of-saved-object/200379)
**Author:** [@hzdb5betrieb](https://discuss.elastic.co/u/hzdb5betrieb)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 6:43pm UTC](https://discuss.elastic.co/t/kibana-automatic-report-generation-of-saved-object/200379 "2019-09-20T18:43:45Z")
Hi, we configured our kibana (7.0.0) to automatically send an Email with a dashboard every day according to https://www.elastic.co/guide/en/kibana/7.0/automating-report-generation.html Now everytime we change something… --- ## [Logstash not reading files changes](https://discuss.elastic.co/t/logstash-not-reading-files-changes/199305)
**Author:** [@Sergioc](https://discuss.elastic.co/u/Sergioc)\ **Replies:** 2\ **Last updated:** [September 20, 2019, 6:34pm UTC](https://discuss.elastic.co/t/logstash-not-reading-files-changes/199305 "2019-09-20T18:34:16Z")
I have Logstash installed and im reading a file that is remote and also i have created a pipeline for a local file. I was thinking at the beginning that the issue was the remote file but the local one is not read at all … --- ## [Curator not actually deleting indexes](https://discuss.elastic.co/t/curator-not-actually-deleting-indexes/200471)
**Author:** [@erikmathis](https://discuss.elastic.co/u/erikmathis)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 6:28pm UTC](https://discuss.elastic.co/t/curator-not-actually-deleting-indexes/200471 "2019-09-20T18:28:20Z")
curator it showing that it found and deleted the index, but the index isnt actually being deleted. Also this should of found two indexes, but it only found one. This is for es 7.2.0 2019-09-20 04:00:07,991 INFO P… --- ## [How to verify what logs have been read from dead\_letter\_queue](https://discuss.elastic.co/t/how-to-verify-what-logs-have-been-read-from-dead-letter-queue/199371)
**Author:** [@RITZ\_VERMA](https://discuss.elastic.co/u/RITZ_VERMA)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 6:19pm UTC](https://discuss.elastic.co/t/how-to-verify-what-logs-have-been-read-from-dead-letter-queue/199371 "2019-09-20T18:19:55Z")
I am reading events from dead queue using dead\_letter\_queue plugin but i am not able to verify if these logs are sent to elasticsearch.is there a way to see what logs have been sent to elasticsearch so that i can delete … --- ## [Http filter leaves fields, that are inserted to elasticsearch](https://discuss.elastic.co/t/http-filter-leaves-fields-that-are-inserted-to-elasticsearch/200470)
**Author:** [@MMH](https://discuss.elastic.co/u/MMH)\ **Replies:** 2\ **Last updated:** [September 20, 2019, 6:11pm UTC](https://discuss.elastic.co/t/http-filter-leaves-fields-that-are-inserted-to-elasticsearch/200470 "2019-09-20T18:11:52Z")
Basically my pipeline looks like this: input { (...) #some input } filter { http { (...) #http request } } output{ elasticsearch{ (...) action =\> "update" doc\_as\_upsert =\> … --- ## [Import the list of ids from external file](https://discuss.elastic.co/t/import-the-list-of-ids-from-external-file/200359)
**Author:** [@andrewKode](https://discuss.elastic.co/u/andrewKode)\ **Replies:** 1\ **Last updated:** [September 20, 2019, 5:42pm UTC](https://discuss.elastic.co/t/import-the-list-of-ids-from-external-file/200359 "2019-09-20T17:42:05Z")
Hello! I want to know if its possible to query on the documents already stored in the database with a filter which reads from a file (json, csv, txt - separated by new line), the ids of the documents that I want to do t… --- ## [Best way to model documents without needing of join](https://discuss.elastic.co/t/best-way-to-model-documents-without-needing-of-join/197561)
**Author:** [@pedroe](https://discuss.elastic.co/u/pedroe)\ **Replies:** 2\ **Last updated:** [September 20, 2019, 5:29pm UTC](https://discuss.elastic.co/t/best-way-to-model-documents-without-needing-of-join/197561 "2019-09-20T17:29:54Z")
I have the following model in a traditional relational database: Restaurant \[id, name, address, phone, etc.\] RestaurantMenu \[restaurant\_id, menu\_item\_name, menu\_item\_price\] In Restaurant I store the information about … --- ## [How to show percentage of counts, total count etc in table,horizontal bar and other widgets](https://discuss.elastic.co/t/how-to-show-percentage-of-counts-total-count-etc-in-table-horizontal-bar-and-other-widgets/200004)
**Author:** [@prakhara](https://discuss.elastic.co/u/prakhara)\ **Replies:** 5\ **Last updated:** [September 20, 2019, 5:11pm UTC](https://discuss.elastic.co/t/how-to-show-percentage-of-counts-total-count-etc-in-table-horizontal-bar-and-other-widgets/200004 "2019-09-20T17:11:03Z")
How to show percentage of counts, total count, unique counts in table,horizontal bar and other widgets --- ## [How does geoIP for private IPaddresses work?](https://discuss.elastic.co/t/how-does-geoip-for-private-ipaddresses-work/199699)
**Author:** [@Rosho](https://discuss.elastic.co/u/Rosho)\ **Replies:** 4\ **Last updated:** [September 20, 2019, 4:58pm UTC](https://discuss.elastic.co/t/how-does-geoip-for-private-ipaddresses-work/199699 "2019-09-20T16:58:39Z")
Hi I want to understand how does the GeoIP work. I want to use it to track employees: If 1 of my private IPs is out of town then an alarm must be set. My first idea (as I am a newbie in Elastic) was of correlating the… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1882) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1884)