# Top **URL:** https://discuss.elastic.co/top.md?page=1001&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1002 --- ## [How to avoid duplicate data when switching from filebeat's log-input to filestream-input?](https://discuss.elastic.co/t/how-to-avoid-duplicate-data-when-switching-from-filebeats-log-input-to-filestream-input/324878)
**Author:** [@apt-get\_install\_skil](https://discuss.elastic.co/u/apt-get_install_skil)\ **Replies:** 6\ **Last updated:** [February 7, 2023, 6:43pm UTC](https://discuss.elastic.co/t/how-to-avoid-duplicate-data-when-switching-from-filebeats-log-input-to-filestream-input/324878 "2023-02-07T18:43:58Z")
Hey guys, right now, I'm planning the switch from filebeat's log-input to filestream-input. We have many filebeats running on our numerous servers that are harvesting many log files. We deploy them with an Ansible Play… --- ## [Elasticsearch machine learning datafeed configuration error](https://discuss.elastic.co/t/elasticsearch-machine-learning-datafeed-configuration-error/305484)
**Author:** [@zerojin63](https://discuss.elastic.co/u/zerojin63)\ **Replies:** 6\ **Last updated:** [June 17, 2022, 10:35am UTC](https://discuss.elastic.co/t/elasticsearch-machine-learning-datafeed-configuration-error/305484 "2022-06-17T10:35:31Z")
I'm trying to alter datafeed for ml jobs but the same errror keep occurs. What I want to do is alter data like 'abc/def/ghi' into 'abc' so based on this i wrote script as follows "runtime\_mappings": { "my\_runtime… --- ## [Create alerts in packetbeat monitoring](https://discuss.elastic.co/t/create-alerts-in-packetbeat-monitoring/167970)
**Author:** [@RamyaGowda](https://discuss.elastic.co/u/RamyaGowda)\ **Replies:** 6\ **Last updated:** [February 14, 2019, 5:59am UTC](https://discuss.elastic.co/t/create-alerts-in-packetbeat-monitoring/167970 "2019-02-14T05:59:44Z")
I am monitoring packetbeat using xpack. Monitoring beats,if my packetbeat goe's down i should get notified through mail,how could i create watcher alert in this scenario. Thanks Ramya --- ## [Unable to install elasticsearch 5.5.1 ,facing issues](https://discuss.elastic.co/t/unable-to-install-elasticsearch-5-5-1-facing-issues/95281)
**Author:** [@vijjun123](https://discuss.elastic.co/u/vijjun123)\ **Replies:** 6\ **Last updated:** [August 1, 2017, 12:15pm UTC](https://discuss.elastic.co/t/unable-to-install-elasticsearch-5-5-1-facing-issues/95281 "2017-08-01T12:15:13Z")
Hi All, Unable to install elasticsearch 5.5.1 and facing the below error. Could you please help me for further ERROR: \[2\] bootstrap checks failed \[1\]: max file descriptors \[4096\] for elasticsearch process is too low,… --- ## [DDoS attach detection using Elastic stack](https://discuss.elastic.co/t/ddos-attach-detection-using-elastic-stack/258984)
**Author:** [@atharvak](https://discuss.elastic.co/u/atharvak)\ **Replies:** 1\ **Last updated:** [April 13, 2021, 10:54am UTC](https://discuss.elastic.co/t/ddos-attach-detection-using-elastic-stack/258984 "2021-04-13T10:54:49Z")
Hello all, I am currently using Elastic stack to parse Apache and Nginx web logs with Filebeat installed on multiple remote servers shipping logs to my Elastic server. I want to use the same infrastructure to be able to… --- ## [Problems parsing time in logstash with date filter](https://discuss.elastic.co/t/problems-parsing-time-in-logstash-with-date-filter/113582)
**Author:** [@anchasis](https://discuss.elastic.co/u/anchasis)\ **Replies:** 1\ **Last updated:** [December 29, 2017, 3:04pm UTC](https://discuss.elastic.co/t/problems-parsing-time-in-logstash-with-date-filter/113582 "2017-12-29T15:04:56Z")
I have a problem parsing a timestamp of the format "2017-06-28T10:28:18.000Z". It should match both "ISO8601" and "YYYY-MM-dd'T'HH:mm:ss.SSS'Z'" but apparently it doesn't. All other formats get parsed correctly I tried… --- ## [Dangling index, node can't join cluster](https://discuss.elastic.co/t/dangling-index-node-cant-join-cluster/52869)
**Author:** [@Suny](https://discuss.elastic.co/u/Suny)\ **Replies:** 1\ **Last updated:** [June 15, 2016, 3:55pm UTC](https://discuss.elastic.co/t/dangling-index-node-cant-join-cluster/52869 "2016-06-15T15:55:34Z")
Hi. We have a three node cluster, all possible masters, 2 replicas. In theory, no data should be lost when we lose one node. One node came up without the disks where the data resides. It still joined, to my surprise. I… --- ## [Licence Upgrade: From Gold to Platinum](https://discuss.elastic.co/t/licence-upgrade-from-gold-to-platinum/306183)
**Author:** [@smm](https://discuss.elastic.co/u/smm)\ **Replies:** 3\ **Last updated:** [June 3, 2022, 8:47am UTC](https://discuss.elastic.co/t/licence-upgrade-from-gold-to-platinum/306183 "2022-06-03T08:47:54Z")
Hi there, are there any issues to be excted while upgrading out licence from gold to platinum? Thanks and kind regards! --- ## [Rollover alias with date does not put the right date](https://discuss.elastic.co/t/rollover-alias-with-date-does-not-put-the-right-date/247273)
**Author:** [@pingz](https://discuss.elastic.co/u/pingz)\ **Replies:** 4\ **Last updated:** [September 3, 2020, 6:37pm UTC](https://discuss.elastic.co/t/rollover-alias-with-date-does-not-put-the-right-date/247273 "2020-09-03T18:37:52Z")
Hi: I need to have a new index every day with the myindex + datetime (myindex-YYYY.MM.DD). I created an index with initial name myindex-2020.09.01-000001. index\_body = { "aliases": { "myindex": {… --- ## [Elasticsearch server is unreachable every 2 hours](https://discuss.elastic.co/t/elasticsearch-server-is-unreachable-every-2-hours/109564)
**Author:** [@COil](https://discuss.elastic.co/u/COil)\ **Replies:** 4\ **Last updated:** [November 29, 2017, 2:24pm UTC](https://discuss.elastic.co/t/elasticsearch-server-is-unreachable-every-2-hours/109564 "2017-11-29T14:24:56Z")
Hi, I have created a question on the stack-exchange network about this problem but without a lot of success. elasticsearch is unreachable every two hours 8h52 , 10h52 during several seconds./minutes. And then i… --- ## [What is the recommended memory:data ratio for a cold zone?](https://discuss.elastic.co/t/what-is-the-recommended-memory-data-ratio-for-a-cold-zone/349755)
**Author:** [@calin](https://discuss.elastic.co/u/calin)\ **Replies:** 8\ **Last updated:** [January 11, 2024, 1:31pm UTC](https://discuss.elastic.co/t/what-is-the-recommended-memory-data-ratio-for-a-cold-zone/349755 "2024-01-11T13:31:48Z")
I see for the hot zone it's 30. For a warm zone it's 160. I haven't seen a value for cold zone. And how exactly is that calculated ? Thank you. --- ## [Proximity searches](https://discuss.elastic.co/t/proximity-searches/276850)
**Author:** [@Abhishek\_Shinde](https://discuss.elastic.co/u/Abhishek_Shinde)\ **Replies:** 3\ **Last updated:** [June 28, 2021, 3:49pm UTC](https://discuss.elastic.co/t/proximity-searches/276850 "2021-06-28T15:49:02Z")
I’m trying to achieve Proximity searches with whole wild card, • (Alice \* Bob) NEAR/4 (Sam \* \* John): find all the documents having the phrase “Alice \* Bob” within 4 words distance to “Sam \* \* John”. I’ve tried followi… --- ## [Configuring Kafka Input with SASL PLAINTEXT auth](https://discuss.elastic.co/t/configuring-kafka-input-with-sasl-plaintext-auth/219485)
**Author:** [@chadskidmore](https://discuss.elastic.co/u/chadskidmore)\ **Replies:** 0\ **Last updated:** [February 15, 2020, 4:51pm UTC](https://discuss.elastic.co/t/configuring-kafka-input-with-sasl-plaintext-auth/219485 "2020-02-15T16:51:05Z")
Having some struggles getting kafka-input setup in logstash with SASL PLAINTEXT. Documentation seems to be largely non-existent. I did seem to get Beats sending data in to Kafka with this auth scheme. The input is prett… --- ## [Extract kubernetes cluster name from logs to visualize in kibana dashboard](https://discuss.elastic.co/t/extract-kubernetes-cluster-name-from-logs-to-visualize-in-kibana-dashboard/200050)
**Author:** [@David\_Oceans](https://discuss.elastic.co/u/David_Oceans)\ **Replies:** 3\ **Last updated:** [September 19, 2019, 1:33pm UTC](https://discuss.elastic.co/t/extract-kubernetes-cluster-name-from-logs-to-visualize-in-kibana-dashboard/200050 "2019-09-19T13:33:23Z")
Hi! I'm using filebeat in my GKE clusters to retrieve all logs for all my kubernetes clusters. I would like to do a filter / dashboard or visualization (I don't how to say it hehe) that I can filter logs by kubernetes… --- ## [Logstash 2.3.2 Vulnerability with Netflow codec plugin](https://discuss.elastic.co/t/logstash-2-3-2-vulnerability-with-netflow-codec-plugin/61301)
**Author:** [@suyograo](https://discuss.elastic.co/u/suyograo)\ **Replies:** 0\ **Last updated:** [September 22, 2016, 6:31pm UTC](https://discuss.elastic.co/t/logstash-2-3-2-vulnerability-with-netflow-codec-plugin/61301 "2016-09-22T18:31:33Z")
Hi all, we've published ESA-2016-06 for a vulnerability in netflow codec plugin for Logstash 2.3.2. Thanks to Jorrit Folmer (maintainer of netflow codec) for reporting and fixing this issue. Details below: Vulnerabilit… --- ## [Kibana how to get geo\_point working?](https://discuss.elastic.co/t/kibana-how-to-get-geo-point-working/54579)
**Author:** [@Tommo](https://discuss.elastic.co/u/Tommo)\ **Replies:** 3\ **Last updated:** [July 4, 2016, 2:57am UTC](https://discuss.elastic.co/t/kibana-how-to-get-geo-point-working/54579 "2016-07-04T02:57:53Z")
For the life of me I can't get geo-ip working any help would be greatly accepted. Here is the error in Kibana: "No Compatible Fields: The "syslog-\*" index pattern does not contain any of the following field types: geo\_po… --- ## [How To Create a Pie Charts by using a JSON data?](https://discuss.elastic.co/t/how-to-create-a-pie-charts-by-using-a-json-data/162620)
**Author:** [@mark\_jerf](https://discuss.elastic.co/u/mark_jerf)\ **Replies:** 2\ **Last updated:** [January 10, 2019, 2:15am UTC](https://discuss.elastic.co/t/how-to-create-a-pie-charts-by-using-a-json-data/162620 "2019-01-10T02:15:49Z")
hi, I have a statistics dataset, which would be updated every hour. the format of the dataset is json, which like: { 'input\_time' : '2019-01-02 10:30:00', 'num\_a' : 100, 'num\_b' : 300, 'num\_c' : 200, 'num\_d' : 500 } … --- ## [Max number of values in term query](https://discuss.elastic.co/t/max-number-of-values-in-term-query/9476)
**Author:** [@narinder\_izap](https://discuss.elastic.co/u/narinder_izap)\ **Replies:** 2\ **Last updated:** [October 26, 2012, 10:41am UTC](https://discuss.elastic.co/t/max-number-of-values-in-term-query/9476 "2012-10-26T10:41:15Z")
Hi Shay, I need to get all of the document with the given set of ids. and the set size is about 2000. if I am trying to send the whole set, its not working. Its not picking values more than 1024. Is there… --- ## [How often does Elastic Defend integration auto update signatures](https://discuss.elastic.co/t/how-often-does-elastic-defend-integration-auto-update-signatures/384370)
**Author:** [@etrevino-lumificyber](https://discuss.elastic.co/u/etrevino-lumificyber)\ **Replies:** 1\ **Last updated:** [January 5, 2026, 4:29pm UTC](https://discuss.elastic.co/t/how-often-does-elastic-defend-integration-auto-update-signatures/384370 "2026-01-05T16:29:34Z")
Regarding elastic defend integration auto updates. How frequently do these auto updates occur? How frequently are new threat detections updated? --- ## [Custom UDP Logs Integration Not Ingesting Data](https://discuss.elastic.co/t/custom-udp-logs-integration-not-ingesting-data/358136)
**Author:** [@callum](https://discuss.elastic.co/u/callum)\ **Replies:** 7\ **Last updated:** [April 25, 2024, 3:21pm UTC](https://discuss.elastic.co/t/custom-udp-logs-integration-not-ingesting-data/358136 "2024-04-25T15:21:46Z")
I currently have the 'Custom UDP Logs' integration setup on an Elastic Agent. It's configured to listen on all interfaces for port 9514: All other options are left as default, with the Syslog Options and custom pipel… --- ## [What to chose : Parent/child or Nested model](https://discuss.elastic.co/t/what-to-chose-parent-child-or-nested-model/188959)
**Author:** [@Sunny\_Pelletier](https://discuss.elastic.co/u/Sunny_Pelletier)\ **Replies:** 7\ **Last updated:** [July 5, 2019, 11:47am UTC](https://discuss.elastic.co/t/what-to-chose-parent-child-or-nested-model/188959 "2019-07-05T11:47:51Z")
Hello everyone, I am new to Elasticsearch, and there seems to be some really good features in this tool I have explored it for a few days, and I am currently trying to decide which model type would be preferable. I mad… --- ## [Where is data stored in ES](https://discuss.elastic.co/t/where-is-data-stored-in-es/145315)
**Author:** [@amnon\_d](https://discuss.elastic.co/u/amnon_d)\ **Replies:** 7\ **Last updated:** [August 21, 2018, 8:13am UTC](https://discuss.elastic.co/t/where-is-data-stored-in-es/145315 "2018-08-21T08:13:29Z")
Hi there, Appologies if this question will sound stupid.... I am testing some high availability concepts and I am puzzled about one thing. For my test I am running an ES cluster with one master, two data nodes and one… --- ## [Filter with multiple should and minimum\_should\_match](https://discuss.elastic.co/t/filter-with-multiple-should-and-minimum-should-match/94715)
**Author:** [@begemot](https://discuss.elastic.co/u/begemot)\ **Replies:** 1\ **Last updated:** [July 27, 2017, 11:08pm UTC](https://discuss.elastic.co/t/filter-with-multiple-should-and-minimum-should-match/94715 "2017-07-27T23:08:14Z")
Assume I need to filter result with documents where one string field, 'roles', in "Role1" OR another string field, 'groups', is "Group1" GET /\_search { "query": { "bool": { "should": \[ { … --- ## [Java program failing with None of the configured nodes are available](https://discuss.elastic.co/t/java-program-failing-with-none-of-the-configured-nodes-are-available/63318)
**Author:** [@gundaldo](https://discuss.elastic.co/u/gundaldo)\ **Replies:** 7\ **Last updated:** [October 19, 2016, 6:21am UTC](https://discuss.elastic.co/t/java-program-failing-with-none-of-the-configured-nodes-are-available/63318 "2016-10-19T06:21:17Z")
Hi, I'm new to Elastic search. I have 2 servers one server where Elasticsearch is configured and while other server is having java client installed. When trying to access Elasticsearch from Java program it is erroring … --- ## [Elastic licensing policy agressively pushes to cloud, what a let down](https://discuss.elastic.co/t/elastic-licensing-policy-agressively-pushes-to-cloud-what-a-let-down/249520)
**Author:** [@JLT](https://discuss.elastic.co/u/JLT)\ **Replies:** 5\ **Last updated:** [September 23, 2020, 5:55pm UTC](https://discuss.elastic.co/t/elastic-licensing-policy-agressively-pushes-to-cloud-what-a-let-down/249520 "2020-09-23T17:55:22Z")
Elastic is quick enough to respond but boy what a let down. The sales persons barely knew the product or licensing, it took two calls to be left almost as poorly informed as before. They could not tell with confidence o… --- ## [Curator doesnt show any output](https://discuss.elastic.co/t/curator-doesnt-show-any-output/133997)
**Author:** [@sdr31](https://discuss.elastic.co/u/sdr31)\ **Replies:** 5\ **Last updated:** [May 31, 2018, 5:40pm UTC](https://discuss.elastic.co/t/curator-doesnt-show-any-output/133997 "2018-05-31T17:40:35Z")
I am new to curator and currently trying it out. I want to run curator out of a docker so i downloaded the rpm files (version 5.5) for centos 7 and installed docker based out of centos:7 image. yum localinstall elasti… --- ## [Logstash - \_jsonparsefailure on valid json in udp input](https://discuss.elastic.co/t/logstash-jsonparsefailure-on-valid-json-in-udp-input/297753)
**Author:** [@mybyte](https://discuss.elastic.co/u/mybyte)\ **Replies:** 6\ **Last updated:** [February 21, 2022, 3:22pm UTC](https://discuss.elastic.co/t/logstash-jsonparsefailure-on-valid-json-in-udp-input/297753 "2022-02-21T15:22:30Z")
I'm using Logstash 8.0.0 with a fairly straightforward udp pipeline: input { udp { codec =\> json { charset =\> "UTF-8" } port =\> 12200 } } output { stdout {} } The data is being sent from a custo… --- ## [Upgrade 1.0.3 to 6.3.1](https://discuss.elastic.co/t/upgrade-1-0-3-to-6-3-1/139848)
**Author:** [@jettro](https://discuss.elastic.co/u/jettro)\ **Replies:** 6\ **Last updated:** [July 13, 2018, 2:21pm UTC](https://discuss.elastic.co/t/upgrade-1-0-3-to-6-3-1/139848 "2018-07-13T14:21:30Z")
Hi, I am at a customer with an older version of elasticsearch (1.0.3). One of those versions without documentation. I cannot seem to figure out the right syntax for this version. Does someone have an idea about the best… --- ## [What Logstash Should be](https://discuss.elastic.co/t/what-logstash-should-be/35099)
**Author:** [@Raggyman](https://discuss.elastic.co/u/Raggyman)\ **Replies:** 6\ **Last updated:** [December 7, 2015, 7:07am UTC](https://discuss.elastic.co/t/what-logstash-should-be/35099 "2015-12-07T07:07:14Z")
After being exposed to Logstash in my current role, I thought I would share with you what I think Logstash should be, and maybe I don't know enough about the product, but the focus should be in making the product better.… --- ## [Jdbc connection to MS-SQL server with windows credentials](https://discuss.elastic.co/t/jdbc-connection-to-ms-sql-server-with-windows-credentials/264542)
**Author:** [@ravnen.flyver](https://discuss.elastic.co/u/ravnen.flyver)\ **Replies:** 1\ **Last updated:** [February 19, 2021, 1:10pm UTC](https://discuss.elastic.co/t/jdbc-connection-to-ms-sql-server-with-windows-credentials/264542 "2021-02-19T13:10:29Z")
I am sitting on a WindownServer(2019) where I connect to a Windown sql 2016 server. On my WindownServer I can connect to the SQL server through MS SQL Management Studio, so firewall and all that is ok. And my Windown AD… --- ## [Unable to re-read a kafka topic (after resetting the offset)](https://discuss.elastic.co/t/unable-to-re-read-a-kafka-topic-after-resetting-the-offset/209548)
**Author:** [@brunor](https://discuss.elastic.co/u/brunor)\ **Replies:** 1\ **Last updated:** [November 28, 2019, 10:28am UTC](https://discuss.elastic.co/t/unable-to-re-read-a-kafka-topic-after-resetting-the-offset/209548 "2019-11-28T10:28:15Z")
Hello everyone and thanks in advance, I have been using the kafka plugin for some time. It works great reading messages from two topics I have around, but now I added a third one (alarms) and it never had the messages t… --- ## [What is the Lifetime Support for the supported versions of ElasticSearch in the Elastic Cloud?](https://discuss.elastic.co/t/what-is-the-lifetime-support-for-the-supported-versions-of-elasticsearch-in-the-elastic-cloud/61753)
**Author:** [@Cesar\_Lopez-Nataren](https://discuss.elastic.co/u/Cesar_Lopez-Nataren)\ **Replies:** 1\ **Last updated:** [September 29, 2016, 12:17am UTC](https://discuss.elastic.co/t/what-is-the-lifetime-support-for-the-supported-versions-of-elasticsearch-in-the-elastic-cloud/61753 "2016-09-29T00:17:17Z")
Hello there: Is there a page where I can find the LTS for all the versions of ElasticSearch that the Elastic Cloud supports? In particular, what's the LTS for ElasticSerach 1.7.5? --- ## [Master not found on ES Alpha5](https://discuss.elastic.co/t/master-not-found-on-es-alpha5/60913)
**Author:** [@mad\_min](https://discuss.elastic.co/u/mad_min)\ **Replies:** 1\ **Last updated:** [September 20, 2016, 1:44am UTC](https://discuss.elastic.co/t/master-not-found-on-es-alpha5/60913 "2016-09-20T01:44:10Z")
Hi List, I am trying to bring up a prototype cluster using ES5Alpha5. The node config in config/elasticsearch.yml is (pretty much ported from my prod ES2 config except where I was asked to remove stuff when ES5 was com… --- ## [Grouping requests by unique request ID, and profiling time](https://discuss.elastic.co/t/grouping-requests-by-unique-request-id-and-profiling-time/31567)
**Author:** [@JW1](https://discuss.elastic.co/u/JW1)\ **Replies:** 1\ **Last updated:** [October 3, 2015, 11:59pm UTC](https://discuss.elastic.co/t/grouping-requests-by-unique-request-id-and-profiling-time/31567 "2015-10-03T23:59:49Z")
I'm adding logs to Elasticsearch from multiple services (httpd, PHP, back-end servers, etc.) that are all used during a request. To tie them together, I have httpd generate a unique ID per request, and pass it to all oth… --- ## [Is it possible to set minimum interval for visualizations?](https://discuss.elastic.co/t/is-it-possible-to-set-minimum-interval-for-visualizations/26067)
**Author:** [@Pieter\_Agenbag](https://discuss.elastic.co/u/Pieter_Agenbag)\ **Replies:** 1\ **Last updated:** [July 22, 2015, 3:55pm UTC](https://discuss.elastic.co/t/is-it-possible-to-set-minimum-interval-for-visualizations/26067 "2015-07-22T15:55:45Z")
As the subject states... is it possible to set the minimum allowed interval on a visualization (for instance line chart with dat histogram in the X axis). For instance , I would like to autoscale the interval up when v… --- ## [Problem adding apm integration in Fleet (on-prem+no-internet) version 8.1.0](https://discuss.elastic.co/t/problem-adding-apm-integration-in-fleet-on-prem-no-internet-version-8-1-0/300616)
**Author:** [@bpawan](https://discuss.elastic.co/u/bpawan)\ **Replies:** 4\ **Last updated:** [March 25, 2022, 7:56am UTC](https://discuss.elastic.co/t/problem-adding-apm-integration-in-fleet-on-prem-no-internet-version-8-1-0/300616 "2022-03-25T07:56:41Z")
I am trying to install elk stack on my own servers. I am able to install and configure Elasticsearch, kibana with air-gapped package registry as well fleet server. So far so good. Next stop I am trying to install APM se… --- ## [Why is reindex from remote constantly slowing down on large indices?](https://discuss.elastic.co/t/why-is-reindex-from-remote-constantly-slowing-down-on-large-indices/257354)
**Author:** [@Dmitry\_O](https://discuss.elastic.co/u/Dmitry_O)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 9:47am UTC](https://discuss.elastic.co/t/why-is-reindex-from-remote-constantly-slowing-down-on-large-indices/257354 "2020-12-03T09:47:54Z")
Hey, I have 2 clusters: Source cluster: 5.6 version, 3 node with 126 GB RAM on each. Dest cluster: 7.9 version, 3 node with 6 GB RAM on each and ES\_JAVA\_OPTS -Xms3g -Xmx3g I have ~60 indices of different sizes from (… --- ## [Unable to create index per day](https://discuss.elastic.co/t/unable-to-create-index-per-day/203582)
**Author:** [@Mohammad\_Mousavi](https://discuss.elastic.co/u/Mohammad_Mousavi)\ **Replies:** 4\ **Last updated:** [October 18, 2019, 6:21pm UTC](https://discuss.elastic.co/t/unable-to-create-index-per-day/203582 "2019-10-18T18:21:33Z")
Hi, my output config is: output { elasticsearch { hosts =\> \["localhost"\] manage\_template =\> true index =\> "logstash-%{+YYYY.MM.dd}" } } It creates a index like "logstash-2019.10.14-000001" and doesn't create new … --- ## [Filebeat to Elastic (7.4): connection refused](https://discuss.elastic.co/t/filebeat-to-elastic-7-4-connection-refused/203604)
**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\ **Replies:** 4\ **Last updated:** [October 15, 2019, 12:32pm UTC](https://discuss.elastic.co/t/filebeat-to-elastic-7-4-connection-refused/203604 "2019-10-15T12:32:26Z")
Hi, I installed Elastic, Kibana and Heartbeat as instructed. All 7.4, Ubuntu 18.04 and all working fine. With Filebeat, on another Ubuntu I installed Filebeat and this is can't connect to Elastic: "Connection refused".… --- ## [JVM Heap Size](https://discuss.elastic.co/t/jvm-heap-size/101184)
**Author:** [@ericbarnes](https://discuss.elastic.co/u/ericbarnes)\ **Replies:** 4\ **Last updated:** [September 21, 2017, 12:29am UTC](https://discuss.elastic.co/t/jvm-heap-size/101184 "2017-09-21T00:29:29Z")
We have a pretty new Elasticsearch set up. We seem to be hitting a memory error that we can not overcome. I've increased the values to one half of the installed memory. Any times on adjusting the JVM? \[2017-09-20T09:4… --- ## [誤差棒について](https://discuss.elastic.co/t/topic/87211)
**Author:** [@Genta](https://discuss.elastic.co/u/Genta)\ **Replies:** 4\ **Last updated:** [June 7, 2017, 12:45am UTC](https://discuss.elastic.co/t/topic/87211 "2017-06-07T00:45:35Z")
kibanaのlinechartやhistgramのデータに、誤差棒を付けたいです。 Ｙ軸のcount数が、100±10だったとき、±10を誤差棒として表現できるのしょうか？ --- ## [RestHighLevelClient get api hangs forever](https://discuss.elastic.co/t/resthighlevelclient-get-api-hangs-forever/265756)
**Author:** [@pavanpatel20](https://discuss.elastic.co/u/pavanpatel20)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 5:36am UTC](https://discuss.elastic.co/t/resthighlevelclient-get-api-hangs-forever/265756 "2021-03-03T05:36:14Z")
I am using elasticsearch-rest-client 7.6.2 in my project and we saw that in one of the get call the get hangs forever and never returns. We got the thread dump and see that the thread is blocked on org.apache.http.concu… --- ## [Filebeat aws readStringAndTrimDelimiter failed: context deadline exceeded in logs](https://discuss.elastic.co/t/filebeat-aws-readstringandtrimdelimiter-failed-context-deadline-exceeded-in-logs/249787)
**Author:** [@buzzdeee](https://discuss.elastic.co/u/buzzdeee)\ **Replies:** 2\ **Last updated:** [September 28, 2020, 12:54pm UTC](https://discuss.elastic.co/t/filebeat-aws-readstringandtrimdelimiter-failed-context-deadline-exceeded-in-logs/249787 "2020-09-28T12:54:29Z")
Hi, I'm running filebeat 7.9.0, sending logs to logstash 7.9.0 before they are handed over to ES 7.9.0. For filbeat, I have the AWS module configured to retrieve elblogs. It took me a while to get it setup properly, i.… --- ## [Keyword field is missing](https://discuss.elastic.co/t/keyword-field-is-missing/210339)
**Author:** [@tcaminade](https://discuss.elastic.co/u/tcaminade)\ **Replies:** 2\ **Last updated:** [December 4, 2019, 2:56pm UTC](https://discuss.elastic.co/t/keyword-field-is-missing/210339 "2019-12-04T14:56:26Z")
Hi all, I am spinning an ELK stack (6.6.1). Everything worked well, when suddenly all the "keyword" fields vanished from my items (new indexes, but also older ones that for sure did get those fields in the past). I have… --- ## [NEST Client \`BulkAll\` requires \`DefaultIndexFor\` or \`DefaultIndex\` to work](https://discuss.elastic.co/t/nest-client-bulkall-requires-defaultindexfor-or-defaultindex-to-work/189766)
**Author:** [@blemasle](https://discuss.elastic.co/u/blemasle)\ **Replies:** 2\ **Last updated:** [July 17, 2019, 7:18am UTC](https://discuss.elastic.co/t/nest-client-bulkall-requires-defaultindexfor-or-defaultindex-to-work/189766 "2019-07-17T07:18:27Z")
Hello there, Don't know if it's a bug or a requirement, but the NEST client BulkAll method of ElasticClient requires you to call DefaultIndexFor\() or DefaultIndex() before hand. You'll get an ArgumentException otherw… --- ## [Docker repository error?](https://discuss.elastic.co/t/docker-repository-error/75510)
**Author:** [@YuWatanabe](https://discuss.elastic.co/u/YuWatanabe)\ **Replies:** 2\ **Last updated:** [February 18, 2017, 4:06am UTC](https://discuss.elastic.co/t/docker-repository-error/75510 "2017-02-18T04:06:15Z")
Hi. I just tried to do fresh install for 1.0.0 alpha4 but one of docker repository returns 500 internal error. Container f3618ac16887 fails to download. Is it currently under maintenance ? \[root@Coordinator creationl… --- ## [Using environment variables in elasticsearch config file](https://discuss.elastic.co/t/using-environment-variables-in-elasticsearch-config-file/243390)
**Author:** [@cms95](https://discuss.elastic.co/u/cms95)\ **Replies:** 3\ **Last updated:** [August 3, 2020, 9:37am UTC](https://discuss.elastic.co/t/using-environment-variables-in-elasticsearch-config-file/243390 "2020-08-03T09:37:44Z")
Im trying to use environment variables to define network.host. Ive tried ${var}, var, "{var}", etc all with no luck. ive tried doing whats mentioned here too: https://www.elastic.co/guide/en/elasticsearch/reference/curr… --- ## [Snapshot stuck IN\_PROGRESS](https://discuss.elastic.co/t/snapshot-stuck-in-progress/148552)
**Author:** [@markuchi](https://discuss.elastic.co/u/markuchi)\ **Replies:** 3\ **Last updated:** [September 17, 2018, 4:50am UTC](https://discuss.elastic.co/t/snapshot-stuck-in-progress/148552 "2018-09-17T04:50:05Z")
Running a snapshot has taken days and has been IN\_PROGRESS state During the snapshot we hit the low watermark and want to stop the snapshot and redo one we fix the watermark. We have performed rolling restarts multiple… --- ## [queryNorm is defeating the purpose of scoring](https://discuss.elastic.co/t/querynorm-is-defeating-the-purpose-of-scoring/9101)
**Author:** [@bruun](https://discuss.elastic.co/u/bruun)\ **Replies:** 3\ **Last updated:** [September 23, 2012, 12:15pm UTC](https://discuss.elastic.co/t/querynorm-is-defeating-the-purpose-of-scoring/9101 "2012-09-23T12:15:19Z")
I'm unsure of whether or not I'm trying to wrangle elasticsearch to do something it was not supposed to, but here we go. We have an index (\`example\_index\`) of documents (\`example\`) of the following prototype (I've… --- ## [Nested terms aggregation performance](https://discuss.elastic.co/t/nested-terms-aggregation-performance/260446)
**Author:** [@shusson](https://discuss.elastic.co/u/shusson)\ **Replies:** 0\ **Last updated:** [January 7, 2021, 1:42pm UTC](https://discuss.elastic.co/t/nested-terms-aggregation-performance/260446 "2021-01-07T13:42:47Z")
I'm trying to optimize nested term aggregations for an autocomplete use case. More info on the query and mapping here: https://stackoverflow.com/questions/65613335/improve-performance-of-a-nested-term-aggregation. Based… [Previous page](https://discuss.elastic.co/top.md?page=1000&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1002&per_page=50&period=all)