# Top

**URL:** https://discuss.elastic.co/top.md?page=1007&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1008

---

## [ElasticCloud Watcher slack-integration](https://discuss.elastic.co/t/elasticcloud-watcher-slack-integration/67786)

<div class="topic-metadata">

**Author:** [@Ryan\_Grannell](https://discuss.elastic.co/u/Ryan_Grannell)\
**Replies:** 4\
**Last updated:** [December 29, 2016, 8:51am UTC](https://discuss.elastic.co/t/elasticcloud-watcher-slack-integration/67786 "2016-12-29T08:51:23Z")

</div>

Hi, Are there any plans to add Slack-support to ElasticCloud's watcher instance? We currently monitor most of our IT infrastructure through slack, but we have a significant number of watchers that are sent to email, wh…

---

## [Creating dynamic dashboards depending on a field or filter?](https://discuss.elastic.co/t/creating-dynamic-dashboards-depending-on-a-field-or-filter/69247)

<div class="topic-metadata">

**Author:** [@Kulasangar\_Gowrisang](https://discuss.elastic.co/u/Kulasangar_Gowrisang)\
**Replies:** 1\
**Last updated:** [December 16, 2016, 7:01pm UTC](https://discuss.elastic.co/t/creating-dynamic-dashboards-depending-on-a-field-or-filter/69247 "2016-12-16T19:01:49Z")

</div>

I'm trying to generate dynamic graphs and dashboards, for example lets say I'm having a field called operator id, where values for it could be sequentially added on towards the future. So where as I'm giving the user th…

---

## [Kibana error opening transforms page](https://discuss.elastic.co/t/kibana-error-opening-transforms-page/297780)

<div class="topic-metadata">

**Author:** [@gentle\_ghost](https://discuss.elastic.co/u/gentle_ghost)\
**Replies:** 3\
**Last updated:** [March 10, 2022, 1:56pm UTC](https://discuss.elastic.co/t/kibana-error-opening-transforms-page/297780 "2022-03-10T13:56:00Z")

</div>

Hello, I've been working on transforms today without much of an issue. I went to create another transform in the Kibana UI but as soon as I click "create transform" the page loads with the following error: \> Error: Fa…

---

## [Message text size Kibana](https://discuss.elastic.co/t/message-text-size-kibana/204932)

<div class="topic-metadata">

**Author:** [@kiran2](https://discuss.elastic.co/u/kiran2)\
**Replies:** 3\
**Last updated:** [November 5, 2019, 9:51pm UTC](https://discuss.elastic.co/t/message-text-size-kibana/204932 "2019-11-05T21:51:49Z")

</div>

Team, My query is increasing the message text (number of lines) up to 1000 line in a single document. Note:- When searing for an error I am missing related error above and below lines In kibana 6.7.0 when logs are in…

---

## [Fields in messages](https://discuss.elastic.co/t/fields-in-messages/116785)

<div class="topic-metadata">

**Author:** [@kayaHL](https://discuss.elastic.co/u/kayaHL)\
**Replies:** 3\
**Last updated:** [January 26, 2018, 5:41pm UTC](https://discuss.elastic.co/t/fields-in-messages/116785 "2018-01-26T17:41:43Z")

</div>

Hi guys, I am new to Elasticsearch... I am using filebeat to ship the multiple line unstructured messages to logstash and use grok filter to structure the data. However, I noticed in the application logs, between messag…

---

## [Geo-Coordinates - Behind Corporate Proxy](https://discuss.elastic.co/t/geo-coordinates-behind-corporate-proxy/105986)

<div class="topic-metadata">

**Author:** [@andynz2017](https://discuss.elastic.co/u/andynz2017)\
**Replies:** 3\
**Last updated:** [November 2, 2017, 5:24pm UTC](https://discuss.elastic.co/t/geo-coordinates-behind-corporate-proxy/105986 "2017-11-02T17:24:52Z")

</div>

Hi There, After deploying ELK stack, we have hit a snag where mapping visualisations are not rendering. The URL that the end user browser attempts to contact is; https://catalogue.maps.elastic.co/v1/manifest?my\_app\_ve…

---

## [Jvm memory problem (Data too large, data for.....)](https://discuss.elastic.co/t/jvm-memory-problem-data-too-large-data-for/252756)

<div class="topic-metadata">

**Author:** [@Ariel\_Zach](https://discuss.elastic.co/u/Ariel_Zach)\
**Replies:** 6\
**Last updated:** [October 21, 2020, 12:58pm UTC](https://discuss.elastic.co/t/jvm-memory-problem-data-too-large-data-for/252756 "2020-10-21T12:58:21Z")

</div>

Hello, I am having a problem with the memory of the jvm, I have two clusters with the same configuration and hardware to which I can derive traffic, one with 6.8 and the other with 7.8, the 6.8 cluster has no problem, i…

---

## [Facing issue with logstash command java.lang.IllegalStateException: Logstash stopped processing because of an error: (SystemExit) exit](https://discuss.elastic.co/t/facing-issue-with-logstash-command-java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-systemexit-exit/194709)

<div class="topic-metadata">

**Author:** [@jainabhishek0406](https://discuss.elastic.co/u/jainabhishek0406)\
**Replies:** 6\
**Last updated:** [August 19, 2019, 9:04am UTC](https://discuss.elastic.co/t/facing-issue-with-logstash-command-java-lang-illegalstateexception-logstash-stopped-processing-because-of-an-error-systemexit-exit/194709 "2019-08-19T09:04:54Z")

</div>

C:\\Users\\Abhishek\\Desktop\\elasticSearch\\projectdata\\logstash-6.4.3\\bin\>logstash -f logstash-simple.conf Sending Logstash logs to C:/Users/Abhishek/Desktop/elasticSearch/projectdata/logstash-6.4.3/logs which is now confi…

---

## [Apache Access Logs - Response Time](https://discuss.elastic.co/t/apache-access-logs-response-time/212606)

<div class="topic-metadata">

**Author:** [@mvcp007](https://discuss.elastic.co/u/mvcp007)\
**Replies:** 2\
**Last updated:** [December 23, 2019, 6:41am UTC](https://discuss.elastic.co/t/apache-access-logs-response-time/212606 "2019-12-23T06:41:47Z")

</div>

I have to setup a Dashboard for apache webpage's response time. I have configured in apache2.conf CustomLog as LogFormat "%h %l %u %t "%r" %\>s %b "%{Referer}i" "%{User-agent}i" %T/%D" combined Below is the output from…

---

## [Filebeat replacement for Solaris 11](https://discuss.elastic.co/t/filebeat-replacement-for-solaris-11/201350)

<div class="topic-metadata">

**Author:** [@Ankit\_Jindal](https://discuss.elastic.co/u/Ankit_Jindal)\
**Replies:** 2\
**Last updated:** [September 28, 2019, 3:44am UTC](https://discuss.elastic.co/t/filebeat-replacement-for-solaris-11/201350 "2019-09-28T03:44:31Z")

</div>

We have a requirement for one of our customer where we need to read Oracle DB alert logs. Oracle DB is placed.on Solaris server. As far as we know filebeat does not have support for Solaris. Can you please provide the so…

---

## [Unable to setup a normalizer on a keyword using dynamic mapping](https://discuss.elastic.co/t/unable-to-setup-a-normalizer-on-a-keyword-using-dynamic-mapping/144040)

<div class="topic-metadata">

**Author:** [@vboulaye](https://discuss.elastic.co/u/vboulaye)\
**Replies:** 2\
**Last updated:** [August 13, 2018, 5:10am UTC](https://discuss.elastic.co/t/unable-to-setup-a-normalizer-on-a-keyword-using-dynamic-mapping/144040 "2018-08-13T05:10:56Z")

</div>

Hi, I would like to add a custom normalizer on my keyword fields. I followed up the indications in Adding a normalizer for case-insensitive search on keyword field to an active index It works fine when I apply it to a…

---

## [Update dynamic document field from params in Painless](https://discuss.elastic.co/t/update-dynamic-document-field-from-params-in-painless/110753)

<div class="topic-metadata">

**Author:** [@jeremylyman](https://discuss.elastic.co/u/jeremylyman)\
**Replies:** 2\
**Last updated:** [December 15, 2017, 5:39pm UTC](https://discuss.elastic.co/t/update-dynamic-document-field-from-params-in-painless/110753 "2017-12-15T17:39:37Z")

</div>

I am trying to write a stored script that will iterate through the params and update the ctx.\_source fields from those parameters. I can't seem to figure out the correct way to do this without hardcoding the field names …

---

## [Connecting Kibana to Big Query](https://discuss.elastic.co/t/connecting-kibana-to-big-query/269447)

<div class="topic-metadata">

**Author:** [@nlogn](https://discuss.elastic.co/u/nlogn)\
**Replies:** 1\
**Last updated:** [April 7, 2021, 3:32pm UTC](https://discuss.elastic.co/t/connecting-kibana-to-big-query/269447 "2021-04-07T15:32:57Z")

</div>

We currently use Google BigQuery to store our production logs. I was wondering if it's possible to connect Kibana directly to Google BigQuery to browse and visualize logs?

---

## [Similarity Search in Vector Space with Error](https://discuss.elastic.co/t/similarity-search-in-vector-space-with-error/201546)

<div class="topic-metadata">

**Author:** [@adouib](https://discuss.elastic.co/u/adouib)\
**Replies:** 1\
**Last updated:** [October 2, 2019, 12:56am UTC](https://discuss.elastic.co/t/similarity-search-in-vector-space-with-error/201546 "2019-10-02T00:56:42Z")

</div>

I'm trying to test the new elasticsearch functionality 'word2vec for text similarity'. I use this little example, but I have the following error! I would like to have feedback and tell me where is the error, knowing that…

---

## [Logstash output elasticsearch Error code 504](https://discuss.elastic.co/t/logstash-output-elasticsearch-error-code-504/180400)

<div class="topic-metadata">

**Author:** [@alfonso.viso](https://discuss.elastic.co/u/alfonso.viso)\
**Replies:** 1\
**Last updated:** [May 9, 2019, 5:24pm UTC](https://discuss.elastic.co/t/logstash-output-elasticsearch-error-code-504/180400 "2019-05-09T17:24:15Z")

</div>

Hi all, Recently, in our logs of logstash instance we have this error: ERROR\]\[logstash.outputs.elasticsearch\] Encountered a retryable error. Will Retry with exponential backoff {:code=\>504, :url=\>"https://\<hostname\_el…

---

## [Filebeat is not starting when running the config file](https://discuss.elastic.co/t/filebeat-is-not-starting-when-running-the-config-file/129826)

<div class="topic-metadata">

**Author:** [@Akash\_Tanwar](https://discuss.elastic.co/u/Akash_Tanwar)\
**Replies:** 1\
**Last updated:** [April 27, 2018, 12:46pm UTC](https://discuss.elastic.co/t/filebeat-is-not-starting-when-running-the-config-file/129826 "2018-04-27T12:46:21Z")

</div>

Hi, I am very new to ELK and trying to run filebeat for logstash out but my config file of filebeat is not working. Can some one please help me out on this? filebeat config: filebeat.prospectors: input\_type: log pat…

---

## [Calculation of tfNorm](https://discuss.elastic.co/t/calculation-of-tfnorm/92662)

<div class="topic-metadata">

**Author:** [@HeNKiEeE](https://discuss.elastic.co/u/HeNKiEeE)\
**Replies:** 1\
**Last updated:** [July 11, 2017, 2:23pm UTC](https://discuss.elastic.co/t/calculation-of-tfnorm/92662 "2017-07-11T14:23:18Z")

</div>

Hi, Im looking into the explanation of why certain results get ranked the way they do in my implementation of ElasticSearch. The thing I cannot figure out or find anywhere on the web is the following: What is the mot…

---

## [Trying to understand how to model an index for a specific set of questions](https://discuss.elastic.co/t/trying-to-understand-how-to-model-an-index-for-a-specific-set-of-questions/84633)

<div class="topic-metadata">

**Author:** [@Matthew\_Vines](https://discuss.elastic.co/u/Matthew_Vines)\
**Replies:** 7\
**Last updated:** [May 12, 2017, 4:17pm UTC](https://discuss.elastic.co/t/trying-to-understand-how-to-model-an-index-for-a-specific-set-of-questions/84633 "2017-05-12T16:17:50Z")

</div>

I'm having a hard time figuring out the best way to structure my index(es) to solve this problem, and having some help working it out here will really help me understand some things around indexing best practices. I hav…

---

## [Logstash in windows](https://discuss.elastic.co/t/logstash-in-windows/66635)

<div class="topic-metadata">

**Author:** [@xsallowed](https://discuss.elastic.co/u/xsallowed)\
**Replies:** 1\
**Last updated:** [November 20, 2016, 4:36pm UTC](https://discuss.elastic.co/t/logstash-in-windows/66635 "2016-11-20T16:36:51Z")

</div>

Hi Folks I am a newbie here and all I am trying to do is find a way to see if logstash is able to read my files and is it able to parse it correctly. I took a basic config file from internet and trying to run logstash wi…

---

## [ElasticSearch accpeting all the fields as string](https://discuss.elastic.co/t/elasticsearch-accpeting-all-the-fields-as-string/61009)

<div class="topic-metadata">

**Author:** [@ayushbij27](https://discuss.elastic.co/u/ayushbij27)\
**Replies:** 1\
**Last updated:** [September 20, 2016, 12:16pm UTC](https://discuss.elastic.co/t/elasticsearch-accpeting-all-the-fields-as-string/61009 "2016-09-20T12:16:09Z")

</div>

Hi, I tried to index a .csv file into elasticsearch and define manual mappings so that it does not read my date fields as string but when i am pushing the data into elasticsearch it is taking the default mapping and acce…

---

## [ES Aggregations in Spark](https://discuss.elastic.co/t/es-aggregations-in-spark/45588)

<div class="topic-metadata">

**Author:** [@kucera.jan.cz](https://discuss.elastic.co/u/kucera.jan.cz)\
**Replies:** 1\
**Last updated:** [April 5, 2016, 2:47pm UTC](https://discuss.elastic.co/t/es-aggregations-in-spark/45588 "2016-04-05T14:47:53Z")

</div>

Hello everyone, based on discussion about ES use cases I was wondering whether there is any way how Spark could benefit from ES aggregations and convert them to Dataframe. F.e something like: val esConf = ... val esQu…

---

## [Logstash won't execute unless i delete hsperfdata\_root in tmp folder](https://discuss.elastic.co/t/logstash-wont-execute-unless-i-delete-hsperfdata-root-in-tmp-folder/231096)

<div class="topic-metadata">

**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\
**Replies:** 5\
**Last updated:** [May 5, 2020, 11:46am UTC](https://discuss.elastic.co/t/logstash-wont-execute-unless-i-delete-hsperfdata-root-in-tmp-folder/231096 "2020-05-05T11:46:43Z")

</div>

Hello guys , lately i've had a problem with logstash not executing correctly , so the first time it happend i've found that the cause of the problem was that i did not have enough space in my disk so i freed um some spac…

---

## [Kibana iFrame Cross-Origin](https://discuss.elastic.co/t/kibana-iframe-cross-origin/93631)

<div class="topic-metadata">

**Author:** [@tjroyy](https://discuss.elastic.co/u/tjroyy)\
**Replies:** 5\
**Last updated:** [July 18, 2017, 6:38pm UTC](https://discuss.elastic.co/t/kibana-iframe-cross-origin/93631 "2017-07-18T18:38:18Z")

</div>

I am trying to embed a Kibana saved visual iframe into my website, but I am getting the following Uncaught SecurityError: Blocked a frame with origin "http://XXXXXXXXX:5601" from accessing a cross-origin frame. (http:/…

---

## [Raw tf-idf](https://discuss.elastic.co/t/raw-tf-idf/92170)

<div class="topic-metadata">

**Author:** [@pierce](https://discuss.elastic.co/u/pierce)\
**Replies:** 5\
**Last updated:** [July 6, 2017, 10:50pm UTC](https://discuss.elastic.co/t/raw-tf-idf/92170 "2017-07-06T22:50:45Z")

</div>

I'm looking for a really scalable method to do scoring by tf-idf on a large dataset, so elastic search naturally came to mind. Crucially, I need raw tf-idf, versus the Practical Scoring Function that Lucene uses under t…

---

## [How to create multiple indexes from fields of JSON file from logstach](https://discuss.elastic.co/t/how-to-create-multiple-indexes-from-fields-of-json-file-from-logstach/203558)

<div class="topic-metadata">

**Author:** [@jaytran](https://discuss.elastic.co/u/jaytran)\
**Replies:** 3\
**Last updated:** [October 16, 2019, 2:02am UTC](https://discuss.elastic.co/t/how-to-create-multiple-indexes-from-fields-of-json-file-from-logstach/203558 "2019-10-16T02:02:10Z")

</div>

hi all, I'm a newone, I don't know how to create multiple index from fields in json. I have JSON File like this { "id": "135569", "name" : "jay", "year":2016 , "companies": \["IBM", "Google"\] } { "id": "135570", "name…

---

## [Logstash 400 error: Could not index event to Elasticsearch](https://discuss.elastic.co/t/logstash-400-error-could-not-index-event-to-elasticsearch/177723)

<div class="topic-metadata">

**Author:** [@ep4sh](https://discuss.elastic.co/u/ep4sh)\
**Replies:** 3\
**Last updated:** [April 23, 2019, 1:11pm UTC](https://discuss.elastic.co/t/logstash-400-error-could-not-index-event-to-elasticsearch/177723 "2019-04-23T13:11:47Z")

</div>

Схема отправки логов следующая: \[filebeat =\> logstash1\] =\> logstash2 =\> elasticsearch Суть такая. В документе уже опредено поле \[host\] с типом keyword, затем мы переконфигурили Logstash1 для парсинга логов, которые при…

---

## [Hide index result if result is in another index](https://discuss.elastic.co/t/hide-index-result-if-result-is-in-another-index/149290)

<div class="topic-metadata">

**Author:** [@Kurzer\_Patrick](https://discuss.elastic.co/u/Kurzer_Patrick)\
**Replies:** 8\
**Last updated:** [September 21, 2018, 12:26pm UTC](https://discuss.elastic.co/t/hide-index-result-if-result-is-in-another-index/149290 "2018-09-21T12:26:26Z")

</div>

Hi everybody, I try to get the following working: Lets say I have two indices region and theme. Both of the indices have a field name and both indexed a String named Vienna. At the moment if I search for Vienna I get …

---

## [Ideal heap size for large RAM machine](https://discuss.elastic.co/t/ideal-heap-size-for-large-ram-machine/111915)

<div class="topic-metadata">

**Author:** [@vivek7mehta](https://discuss.elastic.co/u/vivek7mehta)\
**Replies:** 3\
**Last updated:** [December 15, 2017, 7:45am UTC](https://discuss.elastic.co/t/ideal-heap-size-for-large-ram-machine/111915 "2017-12-15T07:45:19Z")

</div>

As suggested here: https://www.elastic.co/guide/en/elasticsearch/guide/current/heap-sizing.html I should give leas than half of my memory to Lucene. It also suggests that I says that I should not assign more than 32GB …

---

## [Help with data node rebalancing please](https://discuss.elastic.co/t/help-with-data-node-rebalancing-please/29922)

<div class="topic-metadata">

**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\
**Replies:** 3\
**Last updated:** [September 26, 2015, 10:31pm UTC](https://discuss.elastic.co/t/help-with-data-node-rebalancing-please/29922 "2015-09-26T22:31:33Z")

</div>

Hello all, Here is my situation: I have a cluster with 2 dedicated data nodes, each with 16TB of storage. After some time, I added 4 more dedicated data nodes, each of those with 16TB of storage as well. I keep 30 …

---

## [Custom analyzer for match phrase](https://discuss.elastic.co/t/custom-analyzer-for-match-phrase/14760)

<div class="topic-metadata">

**Author:** [@nicktackes](https://discuss.elastic.co/u/nicktackes)\
**Replies:** 3\
**Last updated:** [December 9, 2013, 6:14pm UTC](https://discuss.elastic.co/t/custom-analyzer-for-match-phrase/14760 "2013-12-09T18:14:09Z")

</div>

Hi, I have attached a simple example of an index that defines a custom analyzer called casesensitive. I want the default behavior for the index to be the standard index, however, I would like to be able to do a c…

---

## [ElasticSearch, RSS and \`\_mapping\` requirement?](https://discuss.elastic.co/t/elasticsearch-rss-and--mapping-requirement/12971)

<div class="topic-metadata">

**Author:** [@Nev\_Ada](https://discuss.elastic.co/u/Nev_Ada)\
**Replies:** 8\
**Last updated:** [July 29, 2013, 6:49am UTC](https://discuss.elastic.co/t/elasticsearch-rss-and--mapping-requirement/12971 "2013-07-29T06:49:53Z")

</div>

I want to store RSS feeds in a searchable ElasticSearch store. Using RSSRiver , I am confused as to what they want: Do they require a /\_mapping and a /\_meta? So given a nested RSS feed like this one , is t…

---

## [Logstash HTTP output plugin](https://discuss.elastic.co/t/logstash-http-output-plugin/344553)

<div class="topic-metadata">

**Author:** [@mohsin106](https://discuss.elastic.co/u/mohsin106)\
**Replies:** 4\
**Last updated:** [October 10, 2023, 7:12pm UTC](https://discuss.elastic.co/t/logstash-http-output-plugin/344553 "2023-10-10T19:12:26Z")

</div>

I'm trying to use the HTTP output plugin to send a PUT request to a URL but getting a 400 message, and I can't figure out what I'm messing up. I'm using Logstash v8 running in a Docker container. I'm able to successful…

---

## [How to do a cohort analysis using a heatmap](https://discuss.elastic.co/t/how-to-do-a-cohort-analysis-using-a-heatmap/251091)

<div class="topic-metadata">

**Author:** [@Max\_Handle](https://discuss.elastic.co/u/Max_Handle)\
**Replies:** 4\
**Last updated:** [October 6, 2020, 9:18am UTC](https://discuss.elastic.co/t/how-to-do-a-cohort-analysis-using-a-heatmap/251091 "2020-10-06T09:18:19Z")

</div>

Hi, I tried to find a solution online, but I haven't found any answer yet. I am trying to do a cohort/ customer retention analysis. The picture shows my take on this. What I want: I want to see whether customers that w…

---

## [App Search with minimum\_should\_match query](https://discuss.elastic.co/t/app-search-with-minimum-should-match-query/228632)

<div class="topic-metadata">

**Author:** [@sonhle](https://discuss.elastic.co/u/sonhle)\
**Replies:** 4\
**Last updated:** [April 20, 2020, 2:35pm UTC](https://discuss.elastic.co/t/app-search-with-minimum-should-match-query/228632 "2020-04-20T14:35:37Z")

</div>

Hi all, I am new to Elastic App Search. I am using @elastic/app-search-javascript 7.6.0 to do the search. When I tried to search "Food 1" (without quote, I don't want do have an exact search), I got all the documents wit…

---

## [Logstash errors after playing around with x-pack](https://discuss.elastic.co/t/logstash-errors-after-playing-around-with-x-pack/102604)

<div class="topic-metadata">

**Author:** [@mathurin68](https://discuss.elastic.co/u/mathurin68)\
**Replies:** 4\
**Last updated:** [October 5, 2017, 2:02am UTC](https://discuss.elastic.co/t/logstash-errors-after-playing-around-with-x-pack/102604 "2017-10-05T02:02:59Z")

</div>

I did start to add x-pack but am holding off for another week or two so I commented out in logstash.yml xpack.monitoring.enabled: true xpack.monitoring.elasticsearch.url: http://X.X.X.X:9200 and removed any remnants o…

---

## [Issue with JMX Plugin - No such file or directory - No such directory](https://discuss.elastic.co/t/issue-with-jmx-plugin-no-such-file-or-directory-no-such-directory/90920)

<div class="topic-metadata">

**Author:** [@r4z0rw1r3666](https://discuss.elastic.co/u/r4z0rw1r3666)\
**Replies:** 4\
**Last updated:** [July 5, 2017, 7:16am UTC](https://discuss.elastic.co/t/issue-with-jmx-plugin-no-such-file-or-directory-no-such-directory/90920 "2017-07-05T07:16:03Z")

</div>

Hello. I'm experiencing issues when attempting to get the JMX plugin to start via Logstash in a v5 ELK farm. I have previously installed the jmx plugin via bin/logstash-plugin install logstash-input-jmx and received an…

---

## [Elasticsearch + logstash space requirements](https://discuss.elastic.co/t/elasticsearch-logstash-space-requirements/27972)

<div class="topic-metadata">

**Author:** [@imad](https://discuss.elastic.co/u/imad)\
**Replies:** 4\
**Last updated:** [August 27, 2015, 12:59am UTC](https://discuss.elastic.co/t/elasticsearch-logstash-space-requirements/27972 "2015-08-27T00:59:20Z")

</div>

Hi, I am planning to use elasticsearch + logstash with my couchdb on same server. I just wanted to check if installing elasticsearch + logstash on same server should be fine or not? Our web application is expected to h…

---

## [Php api and self signed certs](https://discuss.elastic.co/t/php-api-and-self-signed-certs/22052)

<div class="topic-metadata">

**Author:** [@Paul\_Halliday](https://discuss.elastic.co/u/Paul_Halliday)\
**Replies:** 4\
**Last updated:** [February 11, 2015, 7:01pm UTC](https://discuss.elastic.co/t/php-api-and-self-signed-certs/22052 "2015-02-11T19:01:49Z")

</div>

Hi, I am trying to get the configuration example from here to work: http://www.elasticsearch.org/guide/en/elasticsearch/client/php-api/current/\_security.html#\_guzzleconnection\_self\_signed\_certificate My settin…

---

## [How can i speed up getting all document in an index](https://discuss.elastic.co/t/how-can-i-speed-up-getting-all-document-in-an-index/236805)

<div class="topic-metadata">

**Author:** [@hyungsun\_lim](https://discuss.elastic.co/u/hyungsun_lim)\
**Replies:** 1\
**Last updated:** [June 12, 2020, 3:37am UTC](https://discuss.elastic.co/t/how-can-i-speed-up-getting-all-document-in-an-index/236805 "2020-06-12T03:37:45Z")

</div>

Hello, I have a question. In my index, 50,000,000 documents in there. I want to get all documents by python like below code import elasticsearch import json body\_str = {"query": {"match\_all": {}}} es\_c…

---

## [Script.painless.regex.enabled: true](https://discuss.elastic.co/t/script-painless-regex-enabled-true/188440)

<div class="topic-metadata">

**Author:** [@Champ](https://discuss.elastic.co/u/Champ)\
**Replies:** 1\
**Last updated:** [July 2, 2019, 11:18am UTC](https://discuss.elastic.co/t/script-painless-regex-enabled-true/188440 "2019-07-02T11:18:47Z")

</div>

I am running Elasticsearch in docker and I can't figure out where to configure the "script.painless.regex.enabled: true" in the elasticsearch.yml file. The following is my elasticsearch.yml file Module: elasticsearch D…

---

## [https://artifacts.elastic.co/packages/7.x/apt/dists/stable/InRelease intermittently fails](https://discuss.elastic.co/t/https-artifacts-elastic-co-packages-7-x-apt-dists-stable-inrelease-intermittently-fails/272317)

<div class="topic-metadata">

**Author:** [@baba.tunde](https://discuss.elastic.co/u/baba.tunde)\
**Replies:** 2\
**Last updated:** [May 10, 2021, 10:49am UTC](https://discuss.elastic.co/t/https-artifacts-elastic-co-packages-7-x-apt-dists-stable-inrelease-intermittently-fails/272317 "2021-05-10T10:49:05Z")

</div>

Hi folks, ############################################### wget https://artifacts.elastic.co/packages/7.x/apt/dists/stable/InRelease --2021-05-06 17:35:16-- https://artifacts.elastic.co/packages/7.x/apt/dists/stable/I…

---

## [Offline Logstash install \[Unable to download data from https://rubygems.org\]](https://discuss.elastic.co/t/offline-logstash-install-unable-to-download-data-from-https-rubygems-org/243706)

<div class="topic-metadata">

**Author:** [@Arethusa](https://discuss.elastic.co/u/Arethusa)\
**Replies:** 2\
**Last updated:** [August 4, 2020, 3:54pm UTC](https://discuss.elastic.co/t/offline-logstash-install-unable-to-download-data-from-https-rubygems-org/243706 "2020-08-04T15:54:48Z")

</div>

Hello, I must install logstash and his plugin on offline VM. First on online VM I do: Install Java and Logstash yum install --downloadonly --downloaddir=/home/logstash/ logstash yum install --downloadonly --download…

---

## [Elasticsearch Search REST API is not running](https://discuss.elastic.co/t/elasticsearch-search-rest-api-is-not-running/148387)

<div class="topic-metadata">

**Author:** [@shankarps](https://discuss.elastic.co/u/shankarps)\
**Replies:** 2\
**Last updated:** [September 13, 2018, 1:16am UTC](https://discuss.elastic.co/t/elasticsearch-search-rest-api-is-not-running/148387 "2018-09-13T01:16:20Z")

</div>

I have the free version of ELK installation running in a single server. I can search using Kibana at http://my-server:5601/app/kibana. I can also access the REST API to see the list of indexes (curl request to http://my…

---

## [API Search gives me a wrong bucket count](https://discuss.elastic.co/t/api-search-gives-me-a-wrong-bucket-count/60673)

<div class="topic-metadata">

**Author:** [@xoxys](https://discuss.elastic.co/u/xoxys)\
**Replies:** 2\
**Last updated:** [September 19, 2016, 6:53am UTC](https://discuss.elastic.co/t/api-search-gives-me-a-wrong-bucket-count/60673 "2016-09-19T06:53:02Z")

</div>

\*Elasticsearch version1.4.4\*: OS versionRHEL7.2: Description of the problem including expected versus actual behavior: Hi, i use elasticsearch to collect logmessages. I try to get a overview of all hosts and…

---

## [Updating an index with logstash and elastic output 7.4.0 plugin fails, likely bug?](https://discuss.elastic.co/t/updating-an-index-with-logstash-and-elastic-output-7-4-0-plugin-fails-likely-bug/103894)

<div class="topic-metadata">

**Author:** [@falco\_rocks](https://discuss.elastic.co/u/falco_rocks)\
**Replies:** 0\
**Last updated:** [October 13, 2017, 12:29pm UTC](https://discuss.elastic.co/t/updating-an-index-with-logstash-and-elastic-output-7-4-0-plugin-fails-likely-bug/103894 "2017-10-13T12:29:51Z")

</div>

I am practicing with Logstash and I can't understand the source of this error. I want to modify an index by removing a field and renaming one. I'm on Logstash 5.6.2 Elastic output plugin is 7.4.0 This is an example of …

---

## [String is analyzed non deterministically](https://discuss.elastic.co/t/string-is-analyzed-non-deterministically/58029)

<div class="topic-metadata">

**Author:** [@mashbourne](https://discuss.elastic.co/u/mashbourne)\
**Replies:** 6\
**Last updated:** [August 16, 2016, 7:59pm UTC](https://discuss.elastic.co/t/string-is-analyzed-non-deterministically/58029 "2016-08-16T19:59:42Z")

</div>

UPDATE: I initially thought this was an issue with custom routing since it cropped up after experimenting with \_routing, but it seems to be an issue with analyzers. One property with mapping "type": "string" and value …

---

## [Inject more data to MDC, i.e. user.id](https://discuss.elastic.co/t/inject-more-data-to-mdc-i-e-user-id/342465)

<div class="topic-metadata">

**Author:** [@Nadrendion](https://discuss.elastic.co/u/Nadrendion)\
**Replies:** 5\
**Last updated:** [September 22, 2023, 1:30pm UTC](https://discuss.elastic.co/t/inject-more-data-to-mdc-i-e-user-id/342465 "2023-09-22T13:30:02Z")

</div>

Hi, I have a use case where I have a set of microservices deployed. All of them have the Elastic APM agent attached and log correlation is enabled successfully. I can get Logback to log the transaction.id and the other …

---

## [Looking for help enabling Metricbeat](https://discuss.elastic.co/t/looking-for-help-enabling-metricbeat/333570)

<div class="topic-metadata">

**Author:** [@alongaks](https://discuss.elastic.co/u/alongaks)\
**Replies:** 5\
**Last updated:** [May 17, 2023, 8:45pm UTC](https://discuss.elastic.co/t/looking-for-help-enabling-metricbeat/333570 "2023-05-17T20:45:19Z")

</div>

Hello, I have a single node deploy of Elasticsearch Enterprise Search and Kibana all on version 8.6.2. In this node I enabled self-monitoring with xpack, but am trying to switch to using Metricbeat. While in 'Stack mon…

---

## [CPU usage for logstash hits over 300%](https://discuss.elastic.co/t/cpu-usage-for-logstash-hits-over-300/255174)

<div class="topic-metadata">

**Author:** [@powerinside](https://discuss.elastic.co/u/powerinside)\
**Replies:** 5\
**Last updated:** [November 25, 2020, 2:28pm UTC](https://discuss.elastic.co/t/cpu-usage-for-logstash-hits-over-300/255174 "2020-11-25T14:28:00Z")

</div>

Hello everybody, I am trying to parse logs using multiple grok filters. I have noticed that if i add following pattern, CPU usage for logstash hits over 300%. I have a couple of grok patterns for nginx logs as well wit…

---

## [Logstash:ERROR\]\[logstash.config.sourceloader](https://discuss.elastic.co/t/logstash-error-logstash-config-sourceloader/154294)

<div class="topic-metadata">

**Author:** [@ralimaye](https://discuss.elastic.co/u/ralimaye)\
**Replies:** 5\
**Last updated:** [October 28, 2018, 4:42pm UTC](https://discuss.elastic.co/t/logstash-error-logstash-config-sourceloader/154294 "2018-10-28T16:42:33Z")

</div>

Not able to push the data through logstash. Getting below error. \[2018-10-27T22:00:34,851\]\[INFO \]\[logstash.modules.scaffold\] Initializing module {:module\_name=\>"fb\_apache", :directory=\>"C:/logstash/modules/fb\_apache/con…

[Previous page](https://discuss.elastic.co/top.md?page=1006&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1008&per_page=50&period=all)
