# \#none **URL:** https://discuss.elastic.co/tag/none.md?no_tags=true&page=1915 [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1916 --- ## [How to tune up search performance?](https://discuss.elastic.co/t/how-to-tune-up-search-performance/198179)
**Author:** [@ted\_ye](https://discuss.elastic.co/u/ted_ye)\ **Replies:** 3\ **Last updated:** [September 6, 2019, 3:47am UTC](https://discuss.elastic.co/t/how-to-tune-up-search-performance/198179 "2019-09-06T03:47:16Z")
hello every experts: I want to ask for how to tune up search performance? My cluster: 3 \* Master-eligible nodes with 2 cores 4G RAM 3 \* coordinating nodes with 2 cores 8G RAM 5 \* data nodes with 8cores 32G RAM elas… --- ## [Host.id is not unique](https://discuss.elastic.co/t/host-id-is-not-unique/196487)
**Author:** [@navigator182](https://discuss.elastic.co/u/navigator182)\ **Replies:** 4\ **Last updated:** [September 6, 2019, 2:39am UTC](https://discuss.elastic.co/t/host-id-is-not-unique/196487 "2019-09-06T02:39:55Z")
I am running auditbeat with more than 300 hosts, but there is 50 hosts showing at "\[Visualize\]Host Count \[Auditbeat System\] ECS". I find that the host.id is not unique. it's same on filebeat. How is it happened?auditbeat… --- ## [Does logstash require elasticsearch or can it be used as a standalone?](https://discuss.elastic.co/t/does-logstash-require-elasticsearch-or-can-it-be-used-as-a-standalone/198329)
**Author:** [@rwatts3](https://discuss.elastic.co/u/rwatts3)\ **Replies:** 2\ **Last updated:** [September 6, 2019, 1:38am UTC](https://discuss.elastic.co/t/does-logstash-require-elasticsearch-or-can-it-be-used-as-a-standalone/198329 "2019-09-06T01:38:19Z")
Greetings, I would like to know if logstash can be used as a standalone or does it have to point to an elasticsearch instance. I cannot seem to find the answer anywhere on the elastic site. I'd like to simply use logst… --- ## [How to output all data without mapping in http output](https://discuss.elastic.co/t/how-to-output-all-data-without-mapping-in-http-output/198332)
**Author:** [@rwatts3](https://discuss.elastic.co/u/rwatts3)\ **Replies:** 0\ **Last updated:** [September 6, 2019, 1:37am UTC](https://discuss.elastic.co/t/how-to-output-all-data-without-mapping-in-http-output/198332 "2019-09-06T01:37:52Z")
Greetings, I have a logstash pipeline where I am simply wanting to parse logs, run a few filters, then output the entire payload to an external source via the http output plugin. I am using format =\> "message" with a m… --- ## [コンテナ上のfilebeatのログ収集について](https://discuss.elastic.co/t/filebeat/198264)
**Author:** [@Negi700](https://discuss.elastic.co/u/Negi700)\ **Replies:** 2\ **Last updated:** [September 6, 2019, 1:32am UTC](https://discuss.elastic.co/t/filebeat/198264 "2019-09-06T01:32:12Z")
コンテナ上のfilebeatから、ホストOSの/var/log/messageを収集して Logstashに連携したいのですが、可能でしょうか? 可能な場合、設定方法を教えて頂けないでしょうか? 公式ドキュメントを確認したのですが、見当たらなかったです。 コンテナ上のfilebeatから、ホストOSの/var/log/messageが収集できなくて 詰まっています。 よろしくお願いします。 --- ## [\[ES7.0.1+python3\]\[HELP\]es.bulk() + python3 doesn't ingest csv data into elasticsearch](https://discuss.elastic.co/t/es7-0-1-python3-help-es-bulk-python3-doesnt-ingest-csv-data-into-elasticsearch/197749)
**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\ **Replies:** 3\ **Last updated:** [September 6, 2019, 1:05am UTC](https://discuss.elastic.co/t/es7-0-1-python3-help-es-bulk-python3-doesnt-ingest-csv-data-into-elasticsearch/197749 "2019-09-06T01:05:16Z")
Hi Team, Please check below code which is use python3 and es.bulk() to ingest data in large csv file into elasticsearch. The result is that it doesn't ingest any data. The for loop looks like is not iterative. what's w… --- ## [How can i have a field in my parent doc in ES to store the number of child docs in it](https://discuss.elastic.co/t/how-can-i-have-a-field-in-my-parent-doc-in-es-to-store-the-number-of-child-docs-in-it/197693)
**Author:** [@yash.tandon](https://discuss.elastic.co/u/yash.tandon)\ **Replies:** 5\ **Last updated:** [September 6, 2019, 12:48am UTC](https://discuss.elastic.co/t/how-can-i-have-a-field-in-my-parent-doc-in-es-to-store-the-number-of-child-docs-in-it/197693 "2019-09-06T00:48:13Z")
--- ## [Visualization showing memory usage and running applications](https://discuss.elastic.co/t/visualization-showing-memory-usage-and-running-applications/198106)
**Author:** [@Michal\_Skaryszewski](https://discuss.elastic.co/u/Michal_Skaryszewski)\ **Replies:** 3\ **Last updated:** [September 6, 2019, 12:32am UTC](https://discuss.elastic.co/t/visualization-showing-memory-usage-and-running-applications/198106 "2019-09-06T00:32:46Z")
Hi, is there any way to visualize memory usage and running processes/applications on the same chart? I am trying to present the correlation between applications and most memory. I could not find a convenient solution to… --- ## [Elasticsearch and SEO](https://discuss.elastic.co/t/elasticsearch-and-seo/198325)
**Author:** [@rafaelreale](https://discuss.elastic.co/u/rafaelreale)\ **Replies:** 0\ **Last updated:** [September 5, 2019, 11:26pm UTC](https://discuss.elastic.co/t/elasticsearch-and-seo/198325 "2019-09-05T23:26:48Z")
What is the best stack for working with Elasticsearch for the best SEO results? --- ## [\_dateparsefailure, can't debug further](https://discuss.elastic.co/t/dateparsefailure-cant-debug-further/198119)
**Author:** [@marinipete](https://discuss.elastic.co/u/marinipete)\ **Replies:** 6\ **Last updated:** [September 5, 2019, 11:04pm UTC](https://discuss.elastic.co/t/dateparsefailure-cant-debug-further/198119 "2019-09-05T23:04:49Z")
So I've been creating logstash pipelines for a while now and this is the first time I came across an issue I couldn't find a solution online or debug further, so I decided to post here. I'm getting '\_dateparsefailure' i… --- ## [Question about percentile rank query](https://discuss.elastic.co/t/question-about-percentile-rank-query/198323)
**Author:** [@Nee\_Defeng](https://discuss.elastic.co/u/Nee_Defeng)\ **Replies:** 0\ **Last updated:** [September 5, 2019, 11:02pm UTC](https://discuss.elastic.co/t/question-about-percentile-rank-query/198323 "2019-09-05T23:02:06Z")
I had this query, with which I would expect to have value '0.000005' below the value returned from the record "system" : { "pct" : 0.016} The question is: why it still shows the percentile… --- ## [Custom Webpack settings integration with kibana plugin](https://discuss.elastic.co/t/custom-webpack-settings-integration-with-kibana-plugin/195162)
**Author:** [@pradeep\_c8](https://discuss.elastic.co/u/pradeep_c8)\ **Replies:** 9\ **Last updated:** [September 5, 2019, 10:47pm UTC](https://discuss.elastic.co/t/custom-webpack-settings-integration-with-kibana-plugin/195162 "2019-09-05T22:47:38Z")
Hi, Am trying to merge my react application with kibana plugin, In my react application I used webpack server and webpack configurations, I used alias to refer my files, I need those configs to be inserted with kibana p… --- ## [Changed the path in Elasticsearch.yml file](https://discuss.elastic.co/t/changed-the-path-in-elasticsearch-yml-file/198314)
**Author:** [@aishu](https://discuss.elastic.co/u/aishu)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 8:22pm UTC](https://discuss.elastic.co/t/changed-the-path-in-elasticsearch-yml-file/198314 "2019-09-05T20:22:59Z")
Hi I change the Destination file path in elasticsearch.yml to newly created nfs and copied all the file from old nfs to new one and when i try to restart the elastic search i am seeing these in the logs. \[2019-09-05T10… --- ## [How to set log.file.path in dev tools](https://discuss.elastic.co/t/how-to-set-log-file-path-in-dev-tools/198094)
**Author:** [@Fosiul\_Alam](https://discuss.elastic.co/u/Fosiul_Alam)\ **Replies:** 3\ **Last updated:** [September 5, 2019, 8:19pm UTC](https://discuss.elastic.co/t/how-to-set-log-file-path-in-dev-tools/198094 "2019-09-05T20:19:36Z")
GET filebeat-\*/\_search { "size":1000, "log.file.path":"\*logfile.log", "query":{ "bool":{ "must":{ "match":{ "message":"'\[COMMAND:LOG\]' and '\[COMMAND:1\]'" } … --- ## [Query String Syntax for timestamp like this: 12:30:42:070](https://discuss.elastic.co/t/query-string-syntax-for-timestamp-like-this-1242-070/198299)
**Author:** [@kmiklas](https://discuss.elastic.co/u/kmiklas)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 8:13pm UTC](https://discuss.elastic.co/t/query-string-syntax-for-timestamp-like-this-1242-070/198299 "2019-09-05T20:13:03Z")
I'm trying to isolate a range based on custom timestamps; example: myTimestamp: 12:30:42:069 Date type: string I'm getting this error: Discover: Expected AND, OR, end of input, whitespace but ":" found. Attempts… --- ## [Unable to bypass restriction with synonym token filter](https://discuss.elastic.co/t/unable-to-bypass-restriction-with-synonym-token-filter/195334)
**Author:** [@radoslav.sholev](https://discuss.elastic.co/u/radoslav.sholev)\ **Replies:** 6\ **Last updated:** [September 5, 2019, 8:12pm UTC](https://discuss.elastic.co/t/unable-to-bypass-restriction-with-synonym-token-filter/195334 "2019-09-05T20:12:00Z")
Greetings, I am trying to migrate from ES 5.5 to 7.3, but I got stuck at an issue with the synonym filter. The reference states "This filter tokenize synonyms with whatever tokenizer and token filters appear before it i… --- ## [Windows Embedded support?](https://discuss.elastic.co/t/windows-embedded-support/198207)
**Author:** [@imehl](https://discuss.elastic.co/u/imehl)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 8:00pm UTC](https://discuss.elastic.co/t/windows-embedded-support/198207 "2019-09-05T20:00:43Z")
Hi, I know that Windows Embedded / IoT is not listed under https://www.elastic.co/support/matrix But are there any experiences if it works on Windows Embedded? Thanks --- ## [Kibana Searches Using CSV file](https://discuss.elastic.co/t/kibana-searches-using-csv-file/198171)
**Author:** [@HmadQureshi](https://discuss.elastic.co/u/HmadQureshi)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 7:58pm UTC](https://discuss.elastic.co/t/kibana-searches-using-csv-file/198171 "2019-09-05T19:58:17Z")
I want to search my data populated in ELK(Windows logs) against the contents of a csv file. I have a large data of windows event logs that i want to search for Malware IoCs IPs, exes which are stored in a csv file. How… --- ## [Create New Index for Line Plot](https://discuss.elastic.co/t/create-new-index-for-line-plot/198136)
**Author:** [@Nastooh](https://discuss.elastic.co/u/Nastooh)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 7:54pm UTC](https://discuss.elastic.co/t/create-new-index-for-line-plot/198136 "2019-09-05T19:54:45Z")
Hi On Kibana 6.2.3, I am receving json records that look like "{"A\_1":1234}","{"A\_2":5678}", etc. I would like to change these - in order to plot them - to "{"A":"1","V":1234}", "{"A":"2","V":5678}, ... . I've been expe… --- ## [Logstash 6.5 doesn't seem to be taking mappings in the config or template](https://discuss.elastic.co/t/logstash-6-5-doesnt-seem-to-be-taking-mappings-in-the-config-or-template/198102)
**Author:** [@jwalls](https://discuss.elastic.co/u/jwalls)\ **Replies:** 3\ **Last updated:** [September 5, 2019, 7:47pm UTC](https://discuss.elastic.co/t/logstash-6-5-doesnt-seem-to-be-taking-mappings-in-the-config-or-template/198102 "2019-09-05T19:47:49Z")
In my config file, I have a bunch of fields and convert them to integer, as shown below input { redis { host =\> "${REDIS\_0\_HOST}" port =\> "${REDIS\_0\_PORT}" data\_type =\> "list" key =\> "logstash" } } i… --- ## [How do create a threshold for read\_only\_allow\_delete?](https://discuss.elastic.co/t/how-do-create-a-threshold-for-read-only-allow-delete/198296)
**Author:** [@Luis\_Alejandro\_Galan](https://discuss.elastic.co/u/Luis_Alejandro_Galan)\ **Replies:** 4\ **Last updated:** [September 5, 2019, 7:45pm UTC](https://discuss.elastic.co/t/how-do-create-a-threshold-for-read-only-allow-delete/198296 "2019-09-05T19:45:33Z")
Hello! I am running to an issue where my indices lock after it reaches a certain limit. Where can I find the limit and/or how can I adjust it so that it only locks when it reaches 5% of disk space used? --- ## [Possible error codes, from elastic server](https://discuss.elastic.co/t/possible-error-codes-from-elastic-server/198294)
**Author:** [@berryma4](https://discuss.elastic.co/u/berryma4)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 7:41pm UTC](https://discuss.elastic.co/t/possible-error-codes-from-elastic-server/198294 "2019-09-05T19:41:35Z")
Hello, I can't seem to find in the documentation, a list of possible error returns when using the java high level client (or, from using rest directly). A pointer to this information would be great (using version 7.2 el… --- ## [Starts snapshot from the begining](https://discuss.elastic.co/t/starts-snapshot-from-the-begining/194707)
**Author:** [@macko003](https://discuss.elastic.co/u/macko003)\ **Replies:** 5\ **Last updated:** [September 5, 2019, 7:20pm UTC](https://discuss.elastic.co/t/starts-snapshot-from-the-begining/194707 "2019-09-05T19:20:22Z")
Hi We use a graylog with 10 elastic node backend. ES version: elasticsearch-6.6.0 (same problem with prev versions also) Snapshot repo: local "fs" repo, NFS mounted to a local folder OS: CentOS 7 10 elastic nodes in… --- ## [How do people assert the veracity of their snapshots?](https://discuss.elastic.co/t/how-do-people-assert-the-veracity-of-their-snapshots/198309)
**Author:** [@ndtreviv](https://discuss.elastic.co/u/ndtreviv)\ **Replies:** 1\ **Last updated:** [September 5, 2019, 7:15pm UTC](https://discuss.elastic.co/t/how-do-people-assert-the-veracity-of-their-snapshots/198309 "2019-09-05T19:15:28Z")
We have over 12TB of data in our ES cluster. Most of that is made up of two really massive indices. We take snapshots to an S3 repo - incremental every night, full snapshots once a month. We're starting to wonder how w… --- ## [Master not discovered error](https://discuss.elastic.co/t/master-not-discovered-error/198093)
**Author:** [@esrcon](https://discuss.elastic.co/u/esrcon)\ **Replies:** 8\ **Last updated:** [September 5, 2019, 7:02pm UTC](https://discuss.elastic.co/t/master-not-discovered-error/198093 "2019-09-05T19:02:26Z")
Hello, I created a cluster contains 2 data/master nodes and 3 master-only nodes on AWS EC2. Due to the bootstrap feature, I specified two data nodes ip for luster.initial\_master\_nodes. After cluster started successful… --- ## [Elasticsearch with xpack.security.enabled throws Cluster is not yet ready](https://discuss.elastic.co/t/elasticsearch-with-xpack-security-enabled-throws-cluster-is-not-yet-ready/198260)
**Author:** [@O\_K](https://discuss.elastic.co/u/O_K)\ **Replies:** 7\ **Last updated:** [September 5, 2019, 6:37pm UTC](https://discuss.elastic.co/t/elasticsearch-with-xpack-security-enabled-throws-cluster-is-not-yet-ready/198260 "2019-09-05T18:37:05Z")
Hello, I use the following helm chart Can someone please explain what is pending in order to get elasticsearch running as \> helm install --namespace logging --name elasticsearch -f elasticsearch/values.yaml ./elastic… --- ## [Elasticseach 7.x - Can't add new node to cluster](https://discuss.elastic.co/t/elasticseach-7-x-cant-add-new-node-to-cluster/197941)
**Author:** [@humartinez](https://discuss.elastic.co/u/humartinez)\ **Replies:** 15\ **Last updated:** [September 5, 2019, 6:23pm UTC](https://discuss.elastic.co/t/elasticseach-7-x-cant-add-new-node-to-cluster/197941 "2019-09-05T18:23:23Z")
Hi there, Im having an issue trying to add a new server to an existing cluster thats is using encription and Im getting the following error. \[2019-09-03T20:11:10,344\]\[WARN \]\[o.e.c.c.ClusterFormationFailureHelper\] \[elas… --- ## [Using conditionals to decide which logs to filter](https://discuss.elastic.co/t/using-conditionals-to-decide-which-logs-to-filter/198305)
**Author:** [@sarahvo](https://discuss.elastic.co/u/sarahvo)\ **Replies:** 2\ **Last updated:** [September 5, 2019, 6:17pm UTC](https://discuss.elastic.co/t/using-conditionals-to-decide-which-logs-to-filter/198305 "2019-09-05T18:17:14Z")
Hi, I'm using the beat utilities to ship logs to Logstash. I only want to parse the logs using the grok filter when it's coming from filebeat, but I can't seem to get it to work. The parsing works the way I want it to, b… --- ## [Combining Month's Worth of Daily Logstash Indices into Single Month](https://discuss.elastic.co/t/combining-months-worth-of-daily-logstash-indices-into-single-month/197596)
**Author:** [@jamiejackson](https://discuss.elastic.co/u/jamiejackson)\ **Replies:** 2\ **Last updated:** [September 5, 2019, 6:09pm UTC](https://discuss.elastic.co/t/combining-months-worth-of-daily-logstash-indices-into-single-month/197596 "2019-09-05T18:09:58Z")
I'm pretty new to ES and brand new to anything like reindexing. I've looked through a handful of search\_phase\_execution\_exception-related posts, but didn't see any that I understood to be the same as my problem. My goa… --- ## [Kibana log errors regarding plugin request timeout](https://discuss.elastic.co/t/kibana-log-errors-regarding-plugin-request-timeout/198087)
**Author:** [@jasmineL](https://discuss.elastic.co/u/jasmineL)\ **Replies:** 3\ **Last updated:** [September 5, 2019, 6:04pm UTC](https://discuss.elastic.co/t/kibana-log-errors-regarding-plugin-request-timeout/198087 "2019-09-05T18:04:20Z")
Hi Elastic Team, I am running Kibana 6.8.1 built from git source. When I look at kibana.stdout file, I saw lots of errors regarding some x-pack plugins with Request timeout errors like below. {"type":"log","@timestamp"… [Previous page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1914) [Next page](https://discuss.elastic.co/tag/none.md?no_tags=true&page=1916)