# Top

**URL:** https://discuss.elastic.co/top.md?page=100&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 101

---

## [Json codec vs. json\_lines codec for collecting mongoexport output JSON?](https://discuss.elastic.co/t/json-codec-vs-json-lines-codec-for-collecting-mongoexport-output-json/341616)

<div class="topic-metadata">

**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\
**Replies:** 18\
**Last updated:** [August 31, 2023, 2:59pm UTC](https://discuss.elastic.co/t/json-codec-vs-json-lines-codec-for-collecting-mongoexport-output-json/341616 "2023-08-31T14:59:47Z")

</div>

I'm trying to get Logstash to ingest a JSON file created by a mongoexport call. The file looks like this: { "\_id": "3c51d008add94422abf107f0", "name": "Pulse Get SVN By ID", "type": "automation", "tasks": { "53…

---

## [Is there a "common" benchmark for Solr, ElasticSearch and Sensei?](https://discuss.elastic.co/t/is-there-a-common-benchmark-for-solr-elasticsearch-and-sensei/2909)

<div class="topic-metadata">

**Author:** [@Paolo\_Castagna](https://discuss.elastic.co/u/Paolo_Castagna)\
**Replies:** 20\
**Last updated:** [April 16, 2010, 8:35pm UTC](https://discuss.elastic.co/t/is-there-a-common-benchmark-for-solr-elasticsearch-and-sensei/2909 "2010-04-16T20:35:03Z")

</div>

Is there a fair and not biased comparison in terms of features and performances between Solr \[1\], ElasticSearch \[2\] and Sensei \[3\]? Is there someone interested in helping (just advices on what would need to be done …

---

## [ES 7.15 FileBeats Sophos XG module not separating data into variables](https://discuss.elastic.co/t/es-7-15-filebeats-sophos-xg-module-not-separating-data-into-variables/288577)

<div class="topic-metadata">

**Author:** [@Samy\_Weee](https://discuss.elastic.co/u/Samy_Weee)\
**Replies:** 23\
**Last updated:** [November 16, 2021, 4:59am UTC](https://discuss.elastic.co/t/es-7-15-filebeats-sophos-xg-module-not-separating-data-into-variables/288577 "2021-11-16T04:59:55Z")

</div>

Following This link to configure sophos Module. www.elastic.co/.../filebeat-module-sophos.html I followed the documentation at www.elastic.co/.../filebeat-module-sophos.html and was able to get the data into ES, issue…

---

## [Schedule a Job in Elasticsearch](https://discuss.elastic.co/t/schedule-a-job-in-elasticsearch/265032)

<div class="topic-metadata">

**Author:** [@gruselglatz](https://discuss.elastic.co/u/gruselglatz)\
**Replies:** 9\
**Last updated:** [February 22, 2021, 12:56pm UTC](https://discuss.elastic.co/t/schedule-a-job-in-elasticsearch/265032 "2021-02-22T12:56:32Z")

</div>

Hi, is it possible to schedule a job in elasticsearch and save it? My requirements are that the team only wants to keep certain messages after xy days to reduce the storage capacity. Can i realize it with rollover, il…

---

## [Unable to enforce parent-child relationship while creating indexes thru Java API based Code](https://discuss.elastic.co/t/unable-to-enforce-parent-child-relationship-while-creating-indexes-thru-java-api-based-code/42846)

<div class="topic-metadata">

**Author:** [@amal.saha](https://discuss.elastic.co/u/amal.saha)\
**Replies:** 9\
**Last updated:** [March 7, 2016, 9:05am UTC](https://discuss.elastic.co/t/unable-to-enforce-parent-child-relationship-while-creating-indexes-thru-java-api-based-code/42846 "2016-03-07T09:05:17Z")

</div>

Hello Dear, I had the following code that worked fine with Elasticsearch v0.90.0. This code created child index for a given parent index. When I upgraded ES to 2.x, I get the error, at runtime (there is no compilation …

---

## [Re-indexing a live index](https://discuss.elastic.co/t/re-indexing-a-live-index/73129)

<div class="topic-metadata">

**Author:** [@Zaid\_Amir](https://discuss.elastic.co/u/Zaid_Amir)\
**Replies:** 10\
**Last updated:** [January 29, 2017, 3:22pm UTC](https://discuss.elastic.co/t/re-indexing-a-live-index/73129 "2017-01-29T15:22:43Z")

</div>

Hi, I have a live index currently running with about 40M documents. I want to migrate from ES 1.X to ES 5.X with minimum downtime. My problem is that the documents can be updated at anytime during the re-index so I …

---

## [Enable CORS on Kibana](https://discuss.elastic.co/t/enable-cors-on-kibana/334084)

<div class="topic-metadata">

**Author:** [@Shreyansh\_Jain](https://discuss.elastic.co/u/Shreyansh_Jain)\
**Replies:** 12\
**Last updated:** [June 6, 2023, 4:33am UTC](https://discuss.elastic.co/t/enable-cors-on-kibana/334084 "2023-06-06T04:33:58Z")

</div>

Hi all, I am using kibana version v 7.17.9 I am trying to use this api endpoint to generate cookies in my front end angular application : "/internal/security/login". But while making a post call from my web application…

---

## [When the index library has no data, the type of the field is date](https://discuss.elastic.co/t/when-the-index-library-has-no-data-the-type-of-the-field-is-date/114195)

<div class="topic-metadata">

**Author:** [@hubiao](https://discuss.elastic.co/u/hubiao)\
**Replies:** 15\
**Last updated:** [January 5, 2018, 8:42am UTC](https://discuss.elastic.co/t/when-the-index-library-has-no-data-the-type-of-the-field-is-date/114195 "2018-01-05T08:42:08Z")

</div>

Environmental Science：Windows 7 Version : elasticsearch 5.5 index mapping "createDate": { "type": "date", "store": "true", "format": "yyyy-MM-dd HH:mm:ss" } GET /data/\_search {"from":0,"s…

---

## [S3 Repository Config](https://discuss.elastic.co/t/s3-repository-config/132345)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 20\
**Last updated:** [May 25, 2018, 12:19pm UTC](https://discuss.elastic.co/t/s3-repository-config/132345 "2018-05-25T12:19:59Z")

</div>

Hi, I'm getting an error provisioning an s3 repo on elasticsearch 5.6.3 via repository-s3. Can you assist? config json: { "type": "s3", "settings": { "endpoint": "s3-server", "bucket": "elasticsearch", …

---

## [TileMap, GeoIP for RFC1918 addresses](https://discuss.elastic.co/t/tilemap-geoip-for-rfc1918-addresses/58247)

<div class="topic-metadata">

**Author:** [@bastianhoss](https://discuss.elastic.co/u/bastianhoss)\
**Replies:** 11\
**Last updated:** [August 18, 2016, 8:43pm UTC](https://discuss.elastic.co/t/tilemap-geoip-for-rfc1918-addresses/58247 "2016-08-18T20:43:08Z")

</div>

Hi Community, looking for an opportunity to locate rfc1918 addresses to a tile map. Non-rfc1918 works fine via GeoIP Database: geoip { source =\> "client\_address" target =\> "geoip" dat…

---

## [Audit log](https://discuss.elastic.co/t/audit-log/167976)

<div class="topic-metadata">

**Author:** [@nandha\_88](https://discuss.elastic.co/u/nandha_88)\
**Replies:** 9\
**Last updated:** [February 26, 2019, 6:10am UTC](https://discuss.elastic.co/t/audit-log/167976 "2019-02-26T06:10:22Z")

</div>

Hi All, Please provide us a better solution. Our setup is below and right now we need to monitor user activities in the linux server. Filebeat -\> logstash -\> eS -\> kibana Please share whether we can use the same fi…

---

## [Importing csv with geo locations using logstash 5 / kibana 5](https://discuss.elastic.co/t/importing-csv-with-geo-locations-using-logstash-5-kibana-5/68223)

<div class="topic-metadata">

**Author:** [@Snyder](https://discuss.elastic.co/u/Snyder)\
**Replies:** 9\
**Last updated:** [December 14, 2016, 9:49pm UTC](https://discuss.elastic.co/t/importing-csv-with-geo-locations-using-logstash-5-kibana-5/68223 "2016-12-14T21:49:11Z")

</div>

Hello, Can someone help me with the configuration of a logstash 5 conf file and/or kibana 5? I'm running logstash, elasticsearch and kibana locally on a mac 10.10.x. The topic is about the combination of loading csv fi…

---

## [For Efficient and High Performance Search of Logs](https://discuss.elastic.co/t/for-efficient-and-high-performance-search-of-logs/41127)

<div class="topic-metadata">

**Author:** [@soodlikesjava](https://discuss.elastic.co/u/soodlikesjava)\
**Replies:** 11\
**Last updated:** [February 10, 2016, 6:36am UTC](https://discuss.elastic.co/t/for-efficient-and-high-performance-search-of-logs/41127 "2016-02-10T06:36:50Z")

</div>

Hi I have a scenario where I would have logs from 100 node horizontal scalable Cluster , out of below options which would be the better option to achieve efficient and high performance search ? 1)Creation of 1 Daily I…

---

## [Correlation of Windows Event ID's](https://discuss.elastic.co/t/correlation-of-windows-event-ids/108235)

<div class="topic-metadata">

**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\
**Replies:** 9\
**Last updated:** [December 12, 2017, 5:45am UTC](https://discuss.elastic.co/t/correlation-of-windows-event-ids/108235 "2017-12-12T05:45:07Z")

</div>

I have a list of Windows Event ID's associated with APT activity but I only want it to pop into the dashboard if more than one event happens to the same workstation within a certain amount of time. Is this possible? If…

---

## [Packetbeat CPU high](https://discuss.elastic.co/t/packetbeat-cpu-high/47760)

<div class="topic-metadata">

**Author:** [@Guy\_Wicks](https://discuss.elastic.co/u/Guy_Wicks)\
**Replies:** 9\
**Last updated:** [May 18, 2017, 5:49pm UTC](https://discuss.elastic.co/t/packetbeat-cpu-high/47760 "2017-05-18T17:49:47Z")

</div>

Hi, we've just installed Packetbeat (and topbeat) on a fairly busy (5 to 10 million requests a day) Red Hat webserver (Apache) Since installing, the CPU / load average has increased quite dramatically, previously the CP…

---

## [Index storage size increased a lot after reindex](https://discuss.elastic.co/t/index-storage-size-increased-a-lot-after-reindex/162099)

<div class="topic-metadata">

**Author:** [@guanghaofan](https://discuss.elastic.co/u/guanghaofan)\
**Replies:** 9\
**Last updated:** [January 2, 2019, 8:57am UTC](https://discuss.elastic.co/t/index-storage-size-increased-a-lot-after-reindex/162099 "2019-01-02T08:57:51Z")

</div>

hi, I just reindex all the Eng-sort-test-2018-\* into one single index: Eng-sort-test-2018. what I found is the primary storage size increased a lot, the sum of all sub indices is 39.5895gb, but the new single index size …

---

## [Logstash read file in what order?](https://discuss.elastic.co/t/logstash-read-file-in-what-order/274549)

<div class="topic-metadata">

**Author:** [@theirfan](https://discuss.elastic.co/u/theirfan)\
**Replies:** 21\
**Last updated:** [June 3, 2021, 2:52am UTC](https://discuss.elastic.co/t/logstash-read-file-in-what-order/274549 "2021-06-03T02:52:37Z")

</div>

Hi All, Would like to know how logstash "input" reads files from a directory. I have files which are created based on size limit and each new log creation is appended with the creation date in it's name. Ex: file-010…

---

## [Management threads consuming high CPU on an idle cluster](https://discuss.elastic.co/t/management-threads-consuming-high-cpu-on-an-idle-cluster/103002)

<div class="topic-metadata">

**Author:** [@Itiyama\_Sadana](https://discuss.elastic.co/u/Itiyama_Sadana)\
**Replies:** 13\
**Last updated:** [October 8, 2017, 1:48pm UTC](https://discuss.elastic.co/t/management-threads-consuming-high-cpu-on-an-idle-cluster/103002 "2017-10-08T13:48:17Z")

</div>

Cluster details 100 data nodes, 3 dedicated master node Data node JVM : 30 GB on each node Date node cores: 64 Dedicated master core: 64 Data node JVM: 30 GB Cluster data details Total 500TB Shards have a uniform…

---

## [Failed to start Elasticsearch 7.11.2](https://discuss.elastic.co/t/failed-to-start-elasticsearch-7-11-2/334680)

<div class="topic-metadata">

**Author:** [@Nik1](https://discuss.elastic.co/u/Nik1)\
**Replies:** 35\
**Last updated:** [June 8, 2023, 5:43am UTC](https://discuss.elastic.co/t/failed-to-start-elasticsearch-7-11-2/334680 "2023-06-08T05:43:28Z")

</div>

Elasticsearch service is not starting on the ubuntu machine. Getting the below error. Anybody having idea? ~# systemctl start elasticsearch Job for elasticsearch.service failed because the control process exited with e…

---

## [Grok Help Request - Get FileDate from File Name into new field FileDate](https://discuss.elastic.co/t/grok-help-request-get-filedate-from-file-name-into-new-field-filedate/110404)

<div class="topic-metadata">

**Author:** [@sconrod](https://discuss.elastic.co/u/sconrod)\
**Replies:** 11\
**Last updated:** [December 8, 2017, 1:01am UTC](https://discuss.elastic.co/t/grok-help-request-get-filedate-from-file-name-into-new-field-filedate/110404 "2017-12-08T01:01:47Z")

</div>

Hi, I have a lot of csv files I am importing using the CSV filter but they have not timestamp included in the logs but I do have the date the log was produced in the filename, therefore, I want to create a new filedate f…

---

## [How can we moniter MySql port 3306 and Postgresql port 5432 in windows](https://discuss.elastic.co/t/how-can-we-moniter-mysql-port-3306-and-postgresql-port-5432-in-windows/85886)

<div class="topic-metadata">

**Author:** [@Harinagarajan](https://discuss.elastic.co/u/Harinagarajan)\
**Replies:** 11\
**Last updated:** [June 7, 2017, 1:59am UTC](https://discuss.elastic.co/t/how-can-we-moniter-mysql-port-3306-and-postgresql-port-5432-in-windows/85886 "2017-06-07T01:59:06Z")

</div>

Dears I wanted to get monitor from MySQL(3306) or PostgreSQL(5432) in windows 10 os I have created inbound and outbound about 3306 and 5432 ports I set configuration in packetbeat.yml like packetbeat.interfaces.devi…

---

## [Combining URL and field value/values](https://discuss.elastic.co/t/combining-url-and-field-value-values/274710)

<div class="topic-metadata">

**Author:** [@marija.timovska](https://discuss.elastic.co/u/marija.timovska)\
**Replies:** 25\
**Last updated:** [June 3, 2021, 8:08am UTC](https://discuss.elastic.co/t/combining-url-and-field-value-values/274710 "2021-06-03T08:08:14Z")

</div>

I would like some assistance with creating custom fields in Kibana. I am not sure why the filed I want is shown correctly in Discovery but when I want to Visualize it it changes back to how it is by default. …

---

## [Grok filter for Oracle OSB Server logs](https://discuss.elastic.co/t/grok-filter-for-oracle-osb-server-logs/131318)

<div class="topic-metadata">

**Author:** [@Rakesh\_Js](https://discuss.elastic.co/u/Rakesh_Js)\
**Replies:** 9\
**Last updated:** [May 11, 2018, 5:03pm UTC](https://discuss.elastic.co/t/grok-filter-for-oracle-osb-server-logs/131318 "2018-05-11T17:03:12Z")

</div>

Hi Guys, i am new to ELK and have been using it for the past few days. I am using the ELK stack on Docker and the purpose is to monitor the Oracle OSB server logs (Part of Oracle SOA Product Suite) . I have been trying …

---

## [Filebeat stops sending logs after kubernetes deployment restart](https://discuss.elastic.co/t/filebeat-stops-sending-logs-after-kubernetes-deployment-restart/141096)

<div class="topic-metadata">

**Author:** [@Kamil\_Glod](https://discuss.elastic.co/u/Kamil_Glod)\
**Replies:** 9\
**Last updated:** [August 17, 2018, 7:55am UTC](https://discuss.elastic.co/t/filebeat-stops-sending-logs-after-kubernetes-deployment-restart/141096 "2018-08-17T07:55:57Z")

</div>

Hi, I'm using filebeat in kubernetes cluster with autodiscovery option. When I deploy daemonset first time everything works correctly but after redeploying one of my test deployments do not send logs from new pods. Here…

---

## [S3 snapshot not working after ELK upgrade to 6.4.2](https://discuss.elastic.co/t/s3-snapshot-not-working-after-elk-upgrade-to-6-4-2/161097)

<div class="topic-metadata">

**Author:** [@sreejiths](https://discuss.elastic.co/u/sreejiths)\
**Replies:** 12\
**Last updated:** [December 19, 2018, 6:01am UTC](https://discuss.elastic.co/t/s3-snapshot-not-working-after-elk-upgrade-to-6-4-2/161097 "2018-12-19T06:01:59Z")

</div>

Hi We have upgraded ELK from V5.6.8 to V6.4.2 . Upgrade has been completed but now i am not able to view or connect to on premises Cloud Object Storage . When i do "GET /\_snapshot/" i can see the registered SNAPSHOT RE…

---

## [HeartBeat issue with matching on response body string](https://discuss.elastic.co/t/heartbeat-issue-with-matching-on-response-body-string/233931)

<div class="topic-metadata">

**Author:** [@ozonshak](https://discuss.elastic.co/u/ozonshak)\
**Replies:** 16\
**Last updated:** [June 4, 2020, 12:55pm UTC](https://discuss.elastic.co/t/heartbeat-issue-with-matching-on-response-body-string/233931 "2020-06-04T12:55:23Z")

</div>

Hello. I'm installing HeartBeat for the first time. I've got the basic ping uptime check working. However, I would love to match on a keyword on the page. I keep coming across articles saying this will only match on …

---

## [Date parsing error in Elasticsearch 7.1](https://discuss.elastic.co/t/date-parsing-error-in-elasticsearch-7-1/240607)

<div class="topic-metadata">

**Author:** [@sharadha\_s](https://discuss.elastic.co/u/sharadha_s)\
**Replies:** 10\
**Last updated:** [July 15, 2020, 1:02am UTC](https://discuss.elastic.co/t/date-parsing-error-in-elasticsearch-7-1/240607 "2020-07-15T01:02:12Z")

</div>

We are using the AWS Elasticsearch 7.1 and we see some date formats are not being supported. It used to work in 5.5 and its a issue with only 7.1. Mapping : "dynamic": "strict", "dynamic\_templates…

---

## [Alert on repeated ping failures](https://discuss.elastic.co/t/alert-on-repeated-ping-failures/138981)

<div class="topic-metadata">

**Author:** [@Rob2](https://discuss.elastic.co/u/Rob2)\
**Replies:** 10\
**Last updated:** [July 12, 2018, 7:14pm UTC](https://discuss.elastic.co/t/alert-on-repeated-ping-failures/138981 "2018-07-12T19:14:19Z")

</div>

I'd like to set up: a dashboard showing the ping status of a number of systems (perhaps a table of system names and their status) alerts indicating when systems have stopped responding to the last X ping attempts. I c…

---

## [Failed to build kibana 5.3.1 from source](https://discuss.elastic.co/t/failed-to-build-kibana-5-3-1-from-source/85911)

<div class="topic-metadata">

**Author:** [@ravihk71](https://discuss.elastic.co/u/ravihk71)\
**Replies:** 15\
**Last updated:** [May 17, 2017, 2:17pm UTC](https://discuss.elastic.co/t/failed-to-build-kibana-5-3-1-from-source/85911 "2017-05-17T14:17:12Z")

</div>

Hi All, When i tried to build kibana binary from source am facing issue while running command "npm run build" Followed steps which are mentioned in https://github.com/elastic/kibana/blob/5.x/CONTRIBUTING.md npm in…

---

## [Detections with custom query](https://discuss.elastic.co/t/detections-with-custom-query/252628)

<div class="topic-metadata">

**Author:** [@Anirudhan](https://discuss.elastic.co/u/Anirudhan)\
**Replies:** 14\
**Last updated:** [October 30, 2020, 4:40pm UTC](https://discuss.elastic.co/t/detections-with-custom-query/252628 "2020-10-30T16:40:38Z")

</div>

Hi In the detections, rules created a custom rule for my own index. A simple match query is not working, but the same rule is working with an aggregate query.! detections|690x283 The rule with custom query externalId:…

---

## [Mapper Attachment Plugin](https://discuss.elastic.co/t/mapper-attachment-plugin/70160)

<div class="topic-metadata">

**Author:** [@bdevaca](https://discuss.elastic.co/u/bdevaca)\
**Replies:** 16\
**Last updated:** [December 29, 2016, 4:45pm UTC](https://discuss.elastic.co/t/mapper-attachment-plugin/70160 "2016-12-29T16:45:53Z")

</div>

I've installed the mapper attachment plugin and have been loading different types of attachments and have been doing searches on words that are in the attachment content. It seems to work fine for .txt, .doc, .rtf, .pdf …

---

## [Netflow Mikrotik no data in elasticsearch](https://discuss.elastic.co/t/netflow-mikrotik-no-data-in-elasticsearch/335692)

<div class="topic-metadata">

**Author:** [@sana1567](https://discuss.elastic.co/u/sana1567)\
**Replies:** 20\
**Last updated:** [July 1, 2023, 2:29pm UTC](https://discuss.elastic.co/t/netflow-mikrotik-no-data-in-elasticsearch/335692 "2023-07-01T14:29:16Z")

</div>

hello please help, installed elastic 8.8 + kibana filebeat + netflow I don't see data in my Elasticsearch also when checking the netflow module - check data - No data has been received from this module yet /etc/filebe…

---

## [Problem in migrating from elastic search 1.7.2 to 2.2.0](https://discuss.elastic.co/t/problem-in-migrating-from-elastic-search-1-7-2-to-2-2-0/42786)

<div class="topic-metadata">

**Author:** [@Madhuri\_Vemuri](https://discuss.elastic.co/u/Madhuri_Vemuri)\
**Replies:** 13\
**Last updated:** [March 13, 2016, 2:23am UTC](https://discuss.elastic.co/t/problem-in-migrating-from-elastic-search-1-7-2-to-2-2-0/42786 "2016-03-13T02:23:32Z")

</div>

i updated my elastic Search from 1.7.2 to 2.2.0 When I am running my Code I got the below error Caused by: java.lang.NoSuchFieldError: FAIL\_ON\_SYMBOL\_HASH\_OVERFLOW 11:23:51,194 INFO \[stdout\] (default task-9) at or…

---

## [Why does apm-server not display frontend information on kibana if apm javascript agent accesses requests from ingress](https://discuss.elastic.co/t/why-does-apm-server-not-display-frontend-information-on-kibana-if-apm-javascript-agent-accesses-requests-from-ingress/225605)

<div class="topic-metadata">

**Author:** [@wajika](https://discuss.elastic.co/u/wajika)\
**Replies:** 27\
**Last updated:** [April 16, 2020, 9:07am UTC](https://discuss.elastic.co/t/why-does-apm-server-not-display-frontend-information-on-kibana-if-apm-javascript-agent-accesses-requests-from-ingress/225605 "2020-04-16T09:07:22Z")

</div>

request route RUM config If I filter dotnet (Backend), it's empty Did I ignore something?

---

## [Large translog files using 6.0 stack](https://discuss.elastic.co/t/large-translog-files-using-6-0-stack/110375)

<div class="topic-metadata">

**Author:** [@stevedearl](https://discuss.elastic.co/u/stevedearl)\
**Replies:** 9\
**Last updated:** [December 6, 2017, 9:03am UTC](https://discuss.elastic.co/t/large-translog-files-using-6-0-stack/110375 "2017-12-06T09:03:42Z")

</div>

Hi, I switched to using the new 6.0 ELK stack this morning and when loading data (I started from a brand new instance, rather than trying to migrate) I noticed that I was running out of disk space on my server running E…

---

## [No data Alert](https://discuss.elastic.co/t/no-data-alert/338315)

<div class="topic-metadata">

**Author:** [@Aniket\_Pant](https://discuss.elastic.co/u/Aniket_Pant)\
**Replies:** 18\
**Last updated:** [July 28, 2023, 9:27am UTC](https://discuss.elastic.co/t/no-data-alert/338315 "2023-07-28T09:27:40Z")

</div>

Hi Team, We want to create alert if no data is receiving is from last 15 minute. We have tried with the watcher it worked for us but we can't go as in watcher the alert status does not change like as in alert we have ac…

---

## [Store Large Object in Index without Mapping](https://discuss.elastic.co/t/store-large-object-in-index-without-mapping/5930)

<div class="topic-metadata">

**Author:** [@davrob](https://discuss.elastic.co/u/davrob)\
**Replies:** 13\
**Last updated:** [November 30, 2011, 2:29pm UTC](https://discuss.elastic.co/t/store-large-object-in-index-without-mapping/5930 "2011-11-30T14:29:19Z")

</div>

Hi, I would like to store a large hashmap in my index without mapping it but having available in the \_source. Essentially I want to use ElasticSearch as an object store, where I can associate a hashmap with an inde…

---

## [Full GC,Elasticsearch heap contains a lot of CompressingStoredFieldsReader](https://discuss.elastic.co/t/full-gc-elasticsearch-heap-contains-a-lot-of-compressingstoredfieldsreader/96538)

<div class="topic-metadata">

**Author:** [@psiitoy](https://discuss.elastic.co/u/psiitoy)\
**Replies:** 10\
**Last updated:** [August 14, 2017, 9:53am UTC](https://discuss.elastic.co/t/full-gc-elasticsearch-heap-contains-a-lot-of-compressingstoredfieldsreader/96538 "2017-08-14T09:53:23Z")

</div>

My cluster nodes always Full GC，I use MAT's function "Path to GC Roots" find the refrence is IndicesQueryCache and CompressingStoredFieldsReader, How to solve the question,IndicesQueryCache and CompressingStoredFields…

---

## [Fleet UI is unusable due to timeout errors](https://discuss.elastic.co/t/fleet-ui-is-unusable-due-to-timeout-errors/300936)

<div class="topic-metadata">

**Author:** [@Yash\_Gill](https://discuss.elastic.co/u/Yash_Gill)\
**Replies:** 12\
**Last updated:** [April 9, 2022, 6:32am UTC](https://discuss.elastic.co/t/fleet-ui-is-unusable-due-to-timeout-errors/300936 "2022-04-09T06:32:14Z")

</div>

ES, Kibana, Fleet Server: 7.17. Elastic Agent versions: 7.17 & 7.15.2 I've been using Fleet for a few months on version 7.15.2 & then 7.16 and things were working great, but after upgrade to 7.17, it's unusable. Cannot…

---

## [Discovery with ECS, Dynamic Initial Master Nodes](https://discuss.elastic.co/t/discovery-with-ecs-dynamic-initial-master-nodes/183149)

<div class="topic-metadata">

**Author:** [@brhardwick](https://discuss.elastic.co/u/brhardwick)\
**Replies:** 12\
**Last updated:** [May 28, 2019, 6:05pm UTC](https://discuss.elastic.co/t/discovery-with-ecs-dynamic-initial-master-nodes/183149 "2019-05-28T18:05:28Z")

</div>

I am trying to setup a cluster with Elastic 7 on Amazon ECS. But I would like to get a bit of understanding on an approach for setting up the initial master nodes. I can bring up my stack if i explicitely assign each con…

---

## [Http\_poller -\> graphite](https://discuss.elastic.co/t/http-poller-graphite/26736)

<div class="topic-metadata">

**Author:** [@Bruce\_Lysik](https://discuss.elastic.co/u/Bruce_Lysik)\
**Replies:** 15\
**Last updated:** [August 6, 2015, 11:06pm UTC](https://discuss.elastic.co/t/http-poller-graphite/26736 "2015-08-06T23:06:27Z")

</div>

Trying to use the new input-http\_poller. I've got an application which on a url, spits out json which looks like this in stdout/rubydebugger: { "metrics" =\> { "requests" =\> 12, "foo" =\> 2345, "bar" …

---

## [Problem in fetching text from an attachment](https://discuss.elastic.co/t/problem-in-fetching-text-from-an-attachment/32910)

<div class="topic-metadata">

**Author:** [@Tarneet\_Singh](https://discuss.elastic.co/u/Tarneet_Singh)\
**Replies:** 18\
**Last updated:** [October 26, 2015, 1:41pm UTC](https://discuss.elastic.co/t/problem-in-fetching-text-from-an-attachment/32910 "2015-10-26T13:41:21Z")

</div>

Hi, I am using elasticsearch-1.7.3 and mapper attachment plugin-2.7.1 I have successfully add an attachment in elasticsearch with the help of php code, but while searching a text from attachment, i did not get the desi…

---

## [Unable to read the txt file through Logstash](https://discuss.elastic.co/t/unable-to-read-the-txt-file-through-logstash/251057)

<div class="topic-metadata">

**Author:** [@sukumar.koganti](https://discuss.elastic.co/u/sukumar.koganti)\
**Replies:** 24\
**Last updated:** [October 8, 2020, 6:55pm UTC](https://discuss.elastic.co/t/unable-to-read-the-txt-file-through-logstash/251057 "2020-10-08T18:55:20Z")

</div>

Hi Guys, I am trying to read sample EDI log from the below path using logstash .conf file C:\\Users\\skkoganti\\Documents\\log\\EDI Log-2019-05-27.txt this is my sample input file format input { file { path =\> \["C:/Us…

---

## [Unable to do anything properly with ES](https://discuss.elastic.co/t/unable-to-do-anything-properly-with-es/350244)

<div class="topic-metadata">

**Author:** [@hich\_testone](https://discuss.elastic.co/u/hich_testone)\
**Replies:** 18\
**Last updated:** [January 2, 2024, 9:13pm UTC](https://discuss.elastic.co/t/unable-to-do-anything-properly-with-es/350244 "2024-01-02T21:13:19Z")

</div>

Dear All, I followed exactly the guide here to install ES :slight\_smile: But when I run : sudo /usr/share/elasticsearch/bin/elasticsearch-create-enrollment-token -s node I keep getting this error : ERROR: Failed to …

---

## [Push json key value with ELK](https://discuss.elastic.co/t/push-json-key-value-with-elk/223112)

<div class="topic-metadata">

**Author:** [@elk2](https://discuss.elastic.co/u/elk2)\
**Replies:** 13\
**Last updated:** [March 14, 2020, 12:33pm UTC](https://discuss.elastic.co/t/push-json-key-value-with-elk/223112 "2020-03-14T12:33:33Z")

</div>

I have a lot of json like this that every day have different data: \[{ "date": "2020-02-24 21:00:00", "country": "US", "men": 101, "women": 26, "childreni": 127, }\] I tried to push this into elasticsearch but n…

---

## [Error: string not matched](https://discuss.elastic.co/t/error-string-not-matched/29651)

<div class="topic-metadata">

**Author:** [@Erik\_Parienty](https://discuss.elastic.co/u/Erik_Parienty)\
**Replies:** 12\
**Last updated:** [September 21, 2015, 8:08am UTC](https://discuss.elastic.co/t/error-string-not-matched/29651 "2015-09-21T08:08:54Z")

</div>

Hi all i have an error i cant understand i have rabbitmq with a messege like this {"InternalMessageQueueSize":5,"ExceptionsNumber":300} i like to take it with logstash my input is : input { rabbitmq…

---

## [Mutiple cluster for server](https://discuss.elastic.co/t/mutiple-cluster-for-server/45096)

<div class="topic-metadata">

**Author:** [@mtarik](https://discuss.elastic.co/u/mtarik)\
**Replies:** 13\
**Last updated:** [March 23, 2016, 4:45pm UTC](https://discuss.elastic.co/t/mutiple-cluster-for-server/45096 "2016-03-23T16:45:17Z")

</div>

Bonjour à tous, Suite à un besoin spécifique, est ce qu'on peut déclarer plusieurs cluster dans un seul serveur elasticSearch ? Merci à vous Tarik

---

## [How can I use if condition in filter for xml](https://discuss.elastic.co/t/how-can-i-use-if-condition-in-filter-for-xml/127055)

<div class="topic-metadata">

**Author:** [@seungtae](https://discuss.elastic.co/u/seungtae)\
**Replies:** 18\
**Last updated:** [April 9, 2018, 7:38am UTC](https://discuss.elastic.co/t/how-can-i-use-if-condition-in-filter-for-xml/127055 "2018-04-09T07:38:21Z")

</div>

Is there any solution about using if condition in filter? I want if there is some tags in xml source, do filter about xml, mutae, ruby , ect... First, my xml source is like this : \<?xml version="1.0" encoding="UTF-8"…

---

## [APM distributed trace: how to?](https://discuss.elastic.co/t/apm-distributed-trace-how-to/193646)

<div class="topic-metadata">

**Author:** [@ffknob](https://discuss.elastic.co/u/ffknob)\
**Replies:** 11\
**Last updated:** [August 19, 2019, 2:04pm UTC](https://discuss.elastic.co/t/apm-distributed-trace-how-to/193646 "2019-08-19T14:04:07Z")

</div>

Hello... I'm trying to create an app that simulates some requests in order to show APM's features. Now I'm working in an attempt to generate a transaction with distributed trace (https://www.elastic.co/guide/en/kibana/m…

---

## [Analyser not found](https://discuss.elastic.co/t/analyser-not-found/186261)

<div class="topic-metadata">

**Author:** [@ronyarmon](https://discuss.elastic.co/u/ronyarmon)\
**Replies:** 10\
**Last updated:** [June 20, 2019, 3:03pm UTC](https://discuss.elastic.co/t/analyser-not-found/186261 "2019-06-20T15:03:14Z")

</div>

Hello, I'm running a search engine with Elasticsearch 6.5 using flask (Python) where documents were indexed with a synonym analyzer, but when installing the application on another server I cannot connect to the synonym f…

[Previous page](https://discuss.elastic.co/top.md?page=99&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=101&per_page=50&period=all)
