# Top **URL:** https://discuss.elastic.co/top.md?page=1019&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1020 --- ## [Filebeat to index with different structures](https://discuss.elastic.co/t/filebeat-to-index-with-different-structures/266565)
**Author:** [@Edi1](https://discuss.elastic.co/u/Edi1)\ **Replies:** 6\ **Last updated:** [March 9, 2021, 2:00pm UTC](https://discuss.elastic.co/t/filebeat-to-index-with-different-structures/266565 "2021-03-09T14:00:01Z")
Hello, newby here, My task is to take multiple (8) logs with different formats and using filebeat send them directly to elastic. They should all end inside the same index and each log should be searchable using "level" … --- ## [Kibana not displaying monitoring data](https://discuss.elastic.co/t/kibana-not-displaying-monitoring-data/237124)
**Author:** [@souravsahoo](https://discuss.elastic.co/u/souravsahoo)\ **Replies:** 6\ **Last updated:** [June 15, 2020, 12:15pm UTC](https://discuss.elastic.co/t/kibana-not-displaying-monitoring-data/237124 "2020-06-15T12:15:34Z")
I have been trying to setup a separate monitoring cluster for collecting monitoring data from the production cluster. I have installed metricbeat on each of the production cluster's nodes and metricbeats is successfully … --- ## [Continuing after java heap space runs out](https://discuss.elastic.co/t/continuing-after-java-heap-space-runs-out/89430)
**Author:** [@ndev](https://discuss.elastic.co/u/ndev)\ **Replies:** 6\ **Last updated:** [June 20, 2017, 3:21pm UTC](https://discuss.elastic.co/t/continuing-after-java-heap-space-runs-out/89430 "2017-06-20T15:21:44Z")
Hello, I am running many large bulk index requests in a short time period for testing purposes and I have run into Elasticsearch crashing because the java heap becomes filled. I see that there are ways to reduce the chan… --- ## [Port Requirement](https://discuss.elastic.co/t/port-requirement/51529)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 6\ **Last updated:** [June 2, 2016, 4:40am UTC](https://discuss.elastic.co/t/port-requirement/51529 "2016-06-02T04:40:56Z")
It seems that when we start install and run the different kinds of beats, they will go smooth naturally. So is there any actual port opening requirement for beats? --- ## [Elastic-Agent is healthy or offline](https://discuss.elastic.co/t/elastic-agent-is-healthy-or-offline/374899)
**Author:** [@seyed\_amir](https://discuss.elastic.co/u/seyed_amir)\ **Replies:** 7\ **Last updated:** [February 26, 2025, 1:12pm UTC](https://discuss.elastic.co/t/elastic-agent-is-healthy-or-offline/374899 "2025-02-26T13:12:20Z")
Hello, I installed Fleet Server in the cluster and then installed several Windows and Linux agents. The status of all is healthy, but every few minutes these agents are displayed as offline. Although they are sending log… --- ## [Logstash Error Failed to Execute action](https://discuss.elastic.co/t/logstash-error-failed-to-execute-action/315051)
**Author:** [@Technolust](https://discuss.elastic.co/u/Technolust)\ **Replies:** 7\ **Last updated:** [September 23, 2022, 9:38pm UTC](https://discuss.elastic.co/t/logstash-error-failed-to-execute-action/315051 "2022-09-23T21:38:01Z")
Team, I've lost all my hair... For whatever reason, I can't figure this out. \[2022-09-23T15:09:46,265\]\[ERROR\]\[logstash.agent \] Failed to execute action {:action=\>LogStash::PipelineAction::Create/pipeline\_id:m… --- ## [Multiple Filebeat instances with separate configuration files to different Logstash containers](https://discuss.elastic.co/t/multiple-filebeat-instances-with-separate-configuration-files-to-different-logstash-containers/195984)
**Author:** [@kmiklas](https://discuss.elastic.co/u/kmiklas)\ **Replies:** 1\ **Last updated:** [August 21, 2019, 7:36am UTC](https://discuss.elastic.co/t/multiple-filebeat-instances-with-separate-configuration-files-to-different-logstash-containers/195984 "2019-08-21T07:36:13Z")
Is it possible to run multiple instances of Filebeat with different filebeat.yml config files? I need to send log lines to different servers running Logstash. Thx, Keith :^) --- ## [Add fields to winlogbeat events](https://discuss.elastic.co/t/add-fields-to-winlogbeat-events/182639)
**Author:** [@ajhstn](https://discuss.elastic.co/u/ajhstn)\ **Replies:** 7\ **Last updated:** [May 27, 2019, 10:30am UTC](https://discuss.elastic.co/t/add-fields-to-winlogbeat-events/182639 "2019-05-27T10:30:56Z")
Hello using winlogbeat and elasticsearch as the output (not logstash) can i create a key-value pari lookup database? use case: For event\_id: 4625 i would like to include fields or do a lookup for the Status and Substa… --- ## [Logstash is failing](https://discuss.elastic.co/t/logstash-is-failing/136933)
**Author:** [@sandeepnarla22322](https://discuss.elastic.co/u/sandeepnarla22322)\ **Replies:** 7\ **Last updated:** [June 21, 2018, 8:17pm UTC](https://discuss.elastic.co/t/logstash-is-failing/136933 "2018-06-21T20:17:53Z")
/usr/share/logstash/logstash-core/lib/logstash/pipeline.rb:385\] elasticsearch - retrying failed action with response code: 403 ({"type"=\>"cluster\_block\_exception", "reason"=\>"blocked by: \[FORBIDDEN/12/index read-only / a… --- ## [Max emits for creating runtime field](https://discuss.elastic.co/t/max-emits-for-creating-runtime-field/275042)
**Author:** [@robert-n-stewart](https://discuss.elastic.co/u/robert-n-stewart)\ **Replies:** 2\ **Last updated:** [June 5, 2021, 9:04pm UTC](https://discuss.elastic.co/t/max-emits-for-creating-runtime-field/275042 "2021-06-05T21:04:41Z")
Hello, I'm trying to create a runtime field which takes a multi-value long field and converts it to a multi-value string field. This way I can perform a regex search on it. The following search works, but only for field… --- ## [ES Auto Updating its version (Downgrade and Upgrade)](https://discuss.elastic.co/t/es-auto-updating-its-version-downgrade-and-upgrade/126860)
**Author:** [@vaidabhishek](https://discuss.elastic.co/u/vaidabhishek)\ **Replies:** 2\ **Last updated:** [April 6, 2018, 4:49am UTC](https://discuss.elastic.co/t/es-auto-updating-its-version-downgrade-and-upgrade/126860 "2018-04-06T04:49:02Z")
We deployed a 5 Node cluster on Ubuntu 16.04 using dpkg. Strangely enough we've been facing an issue where ES updates the version. It's sometimes 6.2.2 going to 6.2.1 or the other way. Really don't know what is happ… --- ## [Can We visualize pcap(packet capture fiels) data use ELK stack?](https://discuss.elastic.co/t/can-we-visualize-pcap-packet-capture-fiels-data-use-elk-stack/67383)
**Author:** [@Gurram\_Vinay](https://discuss.elastic.co/u/Gurram_Vinay)\ **Replies:** 2\ **Last updated:** [November 29, 2016, 8:12am UTC](https://discuss.elastic.co/t/can-we-visualize-pcap-packet-capture-fiels-data-use-elk-stack/67383 "2016-11-29T08:12:55Z")
Can We visualize pcap(packet capture fiels) -which was passive files data using ELK stack ? --- ## [Configure watcher to send email via Linux "mail" utility](https://discuss.elastic.co/t/configure-watcher-to-send-email-via-linux-mail-utility/52873)
**Author:** [@ksoucy](https://discuss.elastic.co/u/ksoucy)\ **Replies:** 2\ **Last updated:** [June 22, 2016, 6:21pm UTC](https://discuss.elastic.co/t/configure-watcher-to-send-email-via-linux-mail-utility/52873 "2016-06-22T18:21:19Z")
Is there a way to configure Watcher (v2.3.3) to use the standard Linux "mail" utility to send emails, as opposed to using gmail/outlook/exchange, etc ? We use linux mail to send email from scripts we write to extract dat… --- ## [Aggregations with object type properties](https://discuss.elastic.co/t/aggregations-with-object-type-properties/18700)
**Author:** [@Amine\_Benhalloum](https://discuss.elastic.co/u/Amine_Benhalloum)\ **Replies:** 2\ **Last updated:** [July 16, 2014, 2:14pm UTC](https://discuss.elastic.co/t/aggregations-with-object-type-properties/18700 "2014-07-16T14:14:05Z")
Hi everyone, I am trying to figure something out : Here's an example of a document that contains object properties, and then trying to do simple terms aggregations. https://gist.github.com/BAmine/80e1be219d2ac27… --- ## [Bigram field](https://discuss.elastic.co/t/bigram-field/17189)
**Author:** [@Igal](https://discuss.elastic.co/u/Igal)\ **Replies:** 2\ **Last updated:** [April 25, 2014, 5:02am UTC](https://discuss.elastic.co/t/bigram-field/17189 "2014-04-25T05:02:16Z")
I'm trying to add a bigram field for use as described at http://www.elasticsearch.org/guide/en/elasticsearch/reference/current/search-suggesters-phrase.html I defined a bigram tokenizer like so: "bigram\_tokenizer… --- ## [Elastic APM java : Get Active serviceName](https://discuss.elastic.co/t/elastic-apm-java-get-active-servicename/321307)
**Author:** [@Namita\_Jaokar](https://discuss.elastic.co/u/Namita_Jaokar)\ **Replies:** 8\ **Last updated:** [December 26, 2022, 6:01am UTC](https://discuss.elastic.co/t/elastic-apm-java-get-active-servicename/321307 "2022-12-26T06:01:48Z")
Hi, I have a scenario wherein I need to get the list of active services in elasticsearch (ServiceName that would be bound to the Elastic APM Jar in case of java , .dll in case of .net, etc ) . I'll need these service Na… --- ## [Connection timeout when resthighlevel client is called from spark mapPartitions method](https://discuss.elastic.co/t/connection-timeout-when-resthighlevel-client-is-called-from-spark-mappartitions-method/301492)
**Author:** [@vinayak\_j](https://discuss.elastic.co/u/vinayak_j)\ **Replies:** 3\ **Last updated:** [April 5, 2022, 1:56pm UTC](https://discuss.elastic.co/t/connection-timeout-when-resthighlevel-client-is-called-from-spark-mappartitions-method/301492 "2022-04-05T13:56:07Z")
Hi Team, We are getting "Connection timed out " while connecting to elastic cluster \[setup on GCP\] through resthighlevel client from spark mapPartitions() \[using dataproc\]. We are using Elasticsearch for lookup; basica… --- ## [CreateProcess error=193, %1 is not a valid Win32 application](https://discuss.elastic.co/t/createprocess-error-193-1-is-not-a-valid-win32-application/199473)
**Author:** [@Yamini](https://discuss.elastic.co/u/Yamini)\ **Replies:** 0\ **Last updated:** [September 13, 2019, 6:57pm UTC](https://discuss.elastic.co/t/createprocess-error-193-1-is-not-a-valid-win32-application/199473 "2019-09-13T18:57:39Z")
I am new to installing elastic search. I am encountering the below error when trying to start the service. Not sure what's causing this. My machine is Windows 2008 64 Bit. uncaught exception in thread \[main\] org.elasti… --- ## [ELK 7 The request for this panel failed](https://discuss.elastic.co/t/elk-7-the-request-for-this-panel-failed/177136)
**Author:** [@teamg](https://discuss.elastic.co/u/teamg)\ **Replies:** 8\ **Last updated:** [April 26, 2019, 2:36pm UTC](https://discuss.elastic.co/t/elk-7-the-request-for-this-panel-failed/177136 "2019-04-26T14:36:59Z")
I have an ELK 6.7 and an ELK 7 both on single nodes. They're configured the same with metricbeat installed to monitor the nodes. When I look at the Host Overview Dashboard on ELK 7 I see: This does not occur on th… --- ## [Can machine learning operate on correlated events?](https://discuss.elastic.co/t/can-machine-learning-operate-on-correlated-events/150369)
**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\ **Replies:** 8\ **Last updated:** [October 3, 2018, 10:36pm UTC](https://discuss.elastic.co/t/can-machine-learning-operate-on-correlated-events/150369 "2018-10-03T22:36:06Z")
So I have an application where there is 2 events generated async for each request. 1st event indicates the downstream system acknowledged the event and the second event indicates if the initial request succeeded or fail… --- ## [Limit on number of nodes in Amazon ElasticSearch Service](https://discuss.elastic.co/t/limit-on-number-of-nodes-in-amazon-elasticsearch-service/49006)
**Author:** [@abhi.kedari](https://discuss.elastic.co/u/abhi.kedari)\ **Replies:** 3\ **Last updated:** [October 21, 2016, 8:19pm UTC](https://discuss.elastic.co/t/limit-on-number-of-nodes-in-amazon-elasticsearch-service/49006 "2016-10-21T20:19:06Z")
Hi, When I try to create nodes in my Amazon Elasticsearch cluster, it gives me limit of only 10 nodes(instant types) per cluster. Is it like I can not create more than 10 nodes in Amazon ElasticSearch cluster? Or is th… --- ## [How to graph with a string on the y-axis?](https://discuss.elastic.co/t/how-to-graph-with-a-string-on-the-y-axis/53043)
**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\ **Replies:** 3\ **Last updated:** [June 20, 2016, 9:19am UTC](https://discuss.elastic.co/t/how-to-graph-with-a-string-on-the-y-axis/53043 "2016-06-20T09:19:23Z")
Hello , I need to graph the time on the x-axis . Kibana only possible to position a integer on the y-axis . Is there a method to graph a string on the y-axis ? Thanks! --- ## [How can I perform Fraud Detection using Graph feature in X-Pack?](https://discuss.elastic.co/t/how-can-i-perform-fraud-detection-using-graph-feature-in-x-pack/95715)
**Author:** [@PinkiMondal](https://discuss.elastic.co/u/PinkiMondal)\ **Replies:** 2\ **Last updated:** [August 23, 2017, 5:10am UTC](https://discuss.elastic.co/t/how-can-i-perform-fraud-detection-using-graph-feature-in-x-pack/95715 "2017-08-23T05:10:22Z")
I am using Elastic , Kibana version 5.5.1 and integrated X-Pack with Kibana. Now I want to check how Fraud Detection is being done through Graph feature. Please explain with example… --- ## [Easy way to remove keywords mapping](https://discuss.elastic.co/t/easy-way-to-remove-keywords-mapping/305478)
**Author:** [@Evgeny\_Barykin](https://discuss.elastic.co/u/Evgeny_Barykin)\ **Replies:** 4\ **Last updated:** [May 31, 2022, 11:42am UTC](https://discuss.elastic.co/t/easy-way-to-remove-keywords-mapping/305478 "2022-05-31T11:42:01Z")
Hello! I am looking for an easy way to remove any keywords mapping from my metricbeat index. Can you give me an example of how can I do it, please? --- ## [\[Metricbeat System\] Overview ECS Dashboard version 7](https://discuss.elastic.co/t/metricbeat-system-overview-ecs-dashboard-version-7/177527)
**Author:** [@Reedler](https://discuss.elastic.co/u/Reedler)\ **Replies:** 4\ **Last updated:** [April 23, 2019, 4:21pm UTC](https://discuss.elastic.co/t/metricbeat-system-overview-ecs-dashboard-version-7/177527 "2019-04-23T16:21:31Z")
Newly upgraded cluster to v7 as of today. All metricbeat agents are upgraded to 7. I've cleared out all metricbeat indices as this is a dev cluster. I've deleted all dashboard and and visualizations for metricbeat in th… --- ## [Limiting Filebeat Autodiscover to Namespace](https://discuss.elastic.co/t/limiting-filebeat-autodiscover-to-namespace/234803)
**Author:** [@jvirgo](https://discuss.elastic.co/u/jvirgo)\ **Replies:** 1\ **Last updated:** [May 29, 2020, 6:00pm UTC](https://discuss.elastic.co/t/limiting-filebeat-autodiscover-to-namespace/234803 "2020-05-29T18:00:40Z")
I am hoping I can get some guidance on an issue I am having with my filebeat.yml and my kubernetes environment. I am new to elastic so hopefully I am providing the relevant info. I am running a filebeat daemonset and fro… --- ## [KQL and scripted fields](https://discuss.elastic.co/t/kql-and-scripted-fields/272260)
**Author:** [@thomasv95](https://discuss.elastic.co/u/thomasv95)\ **Replies:** 5\ **Last updated:** [May 11, 2021, 8:15am UTC](https://discuss.elastic.co/t/kql-and-scripted-fields/272260 "2021-05-11T08:15:41Z")
Hello, I've been having issues with KQL queries using scripted fields. Specifically, queries on numerical fields using operators such as "\<=" or "\>" throw the following error when using a Lens : \[lens\_merge\_tables\] \> \[e… --- ## [Extraction Elastic SIEM security events](https://discuss.elastic.co/t/extraction-elastic-siem-security-events/254927)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 5\ **Last updated:** [November 18, 2020, 8:38pm UTC](https://discuss.elastic.co/t/extraction-elastic-siem-security-events/254927 "2020-11-18T20:38:02Z")
Hi There, Is there a possibility of extracting all the raw documents of elasticsearch with respect to SIEM events . For example if we have rule name : \[Unusual Login Activity\] and we have enabled this particular out o… --- ## [Detected a corrupted repository , index\ references an unknown snapshot uuid](https://discuss.elastic.co/t/detected-a-corrupted-repository-index-name-references-an-unknown-snapshot-uuid/230371)
**Author:** [@spreet](https://discuss.elastic.co/u/spreet)\ **Replies:** 5\ **Last updated:** [April 30, 2020, 3:42pm UTC](https://discuss.elastic.co/t/detected-a-corrupted-repository-index-name-references-an-unknown-snapshot-uuid/230371 "2020-04-30T15:42:47Z")
Hi, All, We are trying to migrate a self-managed elastic search cluster (version 5.3) to a different Elasticsearch cluster with version 7.1. Below steps works for the first time but fails when I try to restore another s… --- ## [ELK Autoprovision with X-Pack Security in Docker container](https://discuss.elastic.co/t/elk-autoprovision-with-x-pack-security-in-docker-container/216517)
**Author:** [@lungati](https://discuss.elastic.co/u/lungati)\ **Replies:** 5\ **Last updated:** [February 5, 2020, 1:19am UTC](https://discuss.elastic.co/t/elk-autoprovision-with-x-pack-security-in-docker-container/216517 "2020-02-05T01:19:22Z")
I have the following bash script that I'd like to run while building the elk image (sebp/elk) so that it can create the builtin users using credentials I've saved in a file (the current setup doesn't allow for a better w… --- ## [Kibana not refreshing](https://discuss.elastic.co/t/kibana-not-refreshing/148477)
**Author:** [@rkparkar](https://discuss.elastic.co/u/rkparkar)\ **Replies:** 5\ **Last updated:** [September 18, 2018, 6:08pm UTC](https://discuss.elastic.co/t/kibana-not-refreshing/148477 "2018-09-18T18:08:17Z")
Hi, I have created a dummy index. The documents have one of fields as “timegenerated”. The timegenerated is of 2 days prior. Eg if today is 13 sept. Timegenerated is 11 sept. Time stamp is from 00:00 to 23:59. So I got… --- ## [How to plot other values not there in the filters](https://discuss.elastic.co/t/how-to-plot-other-values-not-there-in-the-filters/138044)
**Author:** [@amruth1](https://discuss.elastic.co/u/amruth1)\ **Replies:** 5\ **Last updated:** [July 2, 2018, 11:41pm UTC](https://discuss.elastic.co/t/how-to-plot-other-values-not-there-in-the-filters/138044 "2018-07-02T23:41:11Z")
In the Image shown below I am plotting various errors by their gds number. I have other gds types for which I don't have the filter values but I want them to appear on graph. Here only they filter values are appearing. --- ## [Elasticsearch High CPU high load when searching](https://discuss.elastic.co/t/elasticsearch-high-cpu-high-load-when-searching/19618)
**Author:** [@11161](https://discuss.elastic.co/u/11161)\ **Replies:** 5\ **Last updated:** [September 5, 2014, 1:32am UTC](https://discuss.elastic.co/t/elasticsearch-high-cpu-high-load-when-searching/19618 "2014-09-05T01:32:14Z")
Hi,everyone I'm new to es ,i got a probem with es and tried a lot but still don't know how to change the situation ,so i would be gratitude if you can give me some advice about better performance of es searching … --- ## [Re-index after keywords file changed](https://discuss.elastic.co/t/re-index-after-keywords-file-changed/176574)
**Author:** [@maryam\_abdullah](https://discuss.elastic.co/u/maryam_abdullah)\ **Replies:** 6\ **Last updated:** [April 12, 2019, 10:07am UTC](https://discuss.elastic.co/t/re-index-after-keywords-file-changed/176574 "2019-04-12T10:07:43Z")
Hi, Do I need to apply re-indexing if I update the keywords file and I need it to consider the updated file? Best, Maryam --- ## [Invalid character 'A' looking for beginning of value](https://discuss.elastic.co/t/invalid-character-a-looking-for-beginning-of-value/190446)
**Author:** [@jasony](https://discuss.elastic.co/u/jasony)\ **Replies:** 2\ **Last updated:** [July 15, 2019, 11:03am UTC](https://discuss.elastic.co/t/invalid-character-a-looking-for-beginning-of-value/190446 "2019-07-15T11:03:14Z")
hello, i am trying to replicate below 'curl' query with metricbeat http module. as you see below, 127.0.0.1:8088 opens and responds well as below. $ curl -XGET http://127.0.0.1:8088 Active connections: 5 server accepts… --- ## [Can't parse Laravel log with json content](https://discuss.elastic.co/t/cant-parse-laravel-log-with-json-content/305174)
**Author:** [@Robert\_Garcia\_Torren](https://discuss.elastic.co/u/Robert_Garcia_Torren)\ **Replies:** 3\ **Last updated:** [May 23, 2022, 8:31am UTC](https://discuss.elastic.co/t/cant-parse-laravel-log-with-json-content/305174 "2022-05-23T08:31:50Z")
Hello! I'm trying to send this Laravel Log to Elasticksearch using filebeat and logstash visualizing it with Kibana: \[2022-05-16 12:03:50\] dev.INFO: Update successful for user {"idmember":"37774", "idcard":"0000000H","… --- ## [There is already another instance using the configured data directory](https://discuss.elastic.co/t/there-is-already-another-instance-using-the-configured-data-directory/189333)
**Author:** [@Mohammad\_hossein\_Taj](https://discuss.elastic.co/u/Mohammad_hossein_Taj)\ **Replies:** 0\ **Last updated:** [July 8, 2019, 11:24am UTC](https://discuss.elastic.co/t/there-is-already-another-instance-using-the-configured-data-directory/189333 "2019-07-08T11:24:00Z")
hi I'm trying to get logs that filebeat harvest by logstash. but when I try to run logstash with this command bin/logstash -f /etc/logstash/beatsToElasticSearchPipeline.conf --config.reload.automatic I got this: hread… --- ## [Can i change the Y axis to represent timestamp based data?](https://discuss.elastic.co/t/can-i-change-the-y-axis-to-represent-timestamp-based-data/150814)
**Author:** [@chidori](https://discuss.elastic.co/u/chidori)\ **Replies:** 3\ **Last updated:** [October 8, 2018, 9:43am UTC](https://discuss.elastic.co/t/can-i-change-the-y-axis-to-represent-timestamp-based-data/150814 "2018-10-08T09:43:10Z")
I am relatively new to elasticsearch and trying my best to understand Elastic stack by referring docs and videos. I have setup heartbeat to monitor a list of hosts ( ICMP monitoring ). I am able to successfully connect h… --- ## [Failed to send ping to node after Out Of Memory error](https://discuss.elastic.co/t/failed-to-send-ping-to-node-after-out-of-memory-error/62065)
**Author:** [@KIVagant](https://discuss.elastic.co/u/KIVagant)\ **Replies:** 3\ **Last updated:** [October 4, 2016, 9:51am UTC](https://discuss.elastic.co/t/failed-to-send-ping-to-node-after-out-of-memory-error/62065 "2016-10-04T09:51:22Z")
Hello. I have ElasticSearch 2.4.1 with 3-node cluster. I am trying to make some performance benchmarks. All nodes have same configuration with 1Gb of memory, SSD on Debian GNU/Linux 8. java -version openjdk version "… --- ## [Indexing Performance vs Document Size](https://discuss.elastic.co/t/indexing-performance-vs-document-size/56805)
**Author:** [@anjan](https://discuss.elastic.co/u/anjan)\ **Replies:** 3\ **Last updated:** [August 1, 2016, 7:07pm UTC](https://discuss.elastic.co/t/indexing-performance-vs-document-size/56805 "2016-08-01T19:07:27Z")
I see a big difference in indexing throughput between small documents and large documents. Is this expected and why under the below test conditions? - Small documents are 1KB, large documents are 10KB to 30KB - Observed … --- ## [Debian repo not working?](https://discuss.elastic.co/t/debian-repo-not-working/45222)
**Author:** [@stbc](https://discuss.elastic.co/u/stbc)\ **Replies:** 3\ **Last updated:** [March 31, 2016, 9:10pm UTC](https://discuss.elastic.co/t/debian-repo-not-working/45222 "2016-03-31T21:10:16Z")
Hi everybody. Just tried to set up the repos for apt, but running into problems. My sources.list deb http://packages.elastic.co/logstash/2.2/debian stable main When issuing an apt-update, apt will start and the it t… --- ## [Excessive number of "rescheduling interrupts"](https://discuss.elastic.co/t/excessive-number-of-rescheduling-interrupts/8317)
**Author:** [@Douglas\_Muth](https://discuss.elastic.co/u/Douglas_Muth)\ **Replies:** 3\ **Last updated:** [July 9, 2012, 3:34pm UTC](https://discuss.elastic.co/t/excessive-number-of-rescheduling-interrupts/8317 "2012-07-09T15:34:03Z")
I noticed some slowness on one of my EC2 instances running Amazon Linux today, and discovered that my install of Elastic Search is chewing up hundreds of thousands of interrupts every second: http://i.imgur.com/O0P9… --- ## [Error with paging large result set using SQL Server](https://discuss.elastic.co/t/error-with-paging-large-result-set-using-sql-server/313483)
**Author:** [@manuel.urbano](https://discuss.elastic.co/u/manuel.urbano)\ **Replies:** 7\ **Last updated:** [September 6, 2022, 1:27pm UTC](https://discuss.elastic.co/t/error-with-paging-large-result-set-using-sql-server/313483 "2022-09-06T13:27:59Z")
Hello everyone! I'm trying to import a data set with more than 4 million rows from my database in SQL Server. I followed the advice here Jdbc input plugin | Logstash Reference \[8.4\] | Elastic and set jdbc\_fetch\_size wi… --- ## [Java elastic client](https://discuss.elastic.co/t/java-elastic-client/26973)
**Author:** [@fabioebner](https://discuss.elastic.co/u/fabioebner)\ **Replies:** 1\ **Last updated:** [August 7, 2015, 5:20am UTC](https://discuss.elastic.co/t/java-elastic-client/26973 "2015-08-07T05:20:37Z")
I create one app with elastic client, but only to startup my app i got 53 threads from elastic it's correct?? I alredy try to verify is my client are opened and dont open another if (client==null){ client = new Trans… --- ## [Watcher - Actions conditions in foreach](https://discuss.elastic.co/t/watcher-actions-conditions-in-foreach/324349)
**Author:** [@v\_watch](https://discuss.elastic.co/u/v_watch)\ **Replies:** 4\ **Last updated:** [February 1, 2023, 1:56pm UTC](https://discuss.elastic.co/t/watcher-actions-conditions-in-foreach/324349 "2023-02-01T13:56:41Z")
Hello, I am trying to create a watcher that must send a different slack message depending on the field "state" from each log in the hits.hits The slack message must have: "color" = "good" if the state is finished "col… --- ## [DateHistogramAggregation with Composite sub-aggregation](https://discuss.elastic.co/t/datehistogramaggregation-with-composite-sub-aggregation/232751)
**Author:** [@plm](https://discuss.elastic.co/u/plm)\ **Replies:** 4\ **Last updated:** [May 16, 2020, 4:57pm UTC](https://discuss.elastic.co/t/datehistogramaggregation-with-composite-sub-aggregation/232751 "2020-05-16T16:57:20Z")
Hi, I got the following exception when trying to execute a DateHistogramAggregation with a sub-aggregation of type CompositeAggregation. Any reason why this wouldn't be supported? Also would this be supported with a reg… --- ## [Filebeat 6.8 changing floating point zero to integer in json](https://discuss.elastic.co/t/filebeat-6-8-changing-floating-point-zero-to-integer-in-json/211903)
**Author:** [@Zulu](https://discuss.elastic.co/u/Zulu)\ **Replies:** 4\ **Last updated:** [December 21, 2019, 2:23am UTC](https://discuss.elastic.co/t/filebeat-6-8-changing-floating-point-zero-to-integer-in-json/211903 "2019-12-21T02:23:56Z")
Hi, I am using filebeat to process telemetry data in json format from my application. The application generates files with json objects. When I need to log the floating point number zero, I log it as 0.0 with the intent… --- ## [X-pack Watcher Slack JSON code](https://discuss.elastic.co/t/x-pack-watcher-slack-json-code/96430)
**Author:** [@ninja](https://discuss.elastic.co/u/ninja)\ **Replies:** 4\ **Last updated:** [August 11, 2017, 12:25pm UTC](https://discuss.elastic.co/t/x-pack-watcher-slack-json-code/96430 "2017-08-11T12:25:32Z")
Hello , I’ve created a notify script in JSON for Watcher with Slack Integration . I created webhook that i added at minimal in elasticsearch.yml Bellow is the script : { “trigger”: { “schedule”: { “interval”: “24h” … --- ## [Adding quotes to variables](https://discuss.elastic.co/t/adding-quotes-to-variables/89943)
**Author:** [@orhiee](https://discuss.elastic.co/u/orhiee)\ **Replies:** 4\ **Last updated:** [June 21, 2017, 10:37am UTC](https://discuss.elastic.co/t/adding-quotes-to-variables/89943 "2017-06-21T10:37:45Z")
hello, so i have a elasticsearch filter added to my logstash and I am trying to search all the IP address i get, but i get an ipv6 it messes up, due to the ":" in the address: so my query is: query =\> "type:XYZ A… --- ## [Dec 12th, 2025: \[EN\] Unlock the power of the OpenTelemetry Collector by using it as a framework](https://discuss.elastic.co/t/dec-12th-2025-en-unlock-the-power-of-the-opentelemetry-collector-by-using-it-as-a-framework/383860)
**Author:** [@dmathieu](https://discuss.elastic.co/u/dmathieu)\ **Replies:** 0\ **Last updated:** [December 12, 2025, 8:00am UTC](https://discuss.elastic.co/t/dec-12th-2025-en-unlock-the-power-of-the-opentelemetry-collector-by-using-it-as-a-framework/383860 "2025-12-12T08:00:28Z")
Most people use the OpenTelemetry Collector as a glorified telemetry router. But because sometimes need to go further that just built-in components, behind that façade, it is actually a pluggable, extensible framewor… [Previous page](https://discuss.elastic.co/top.md?page=1018&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1020&per_page=50&period=all)