# Top

**URL:** https://discuss.elastic.co/top.md?page=1035&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1036

---

## [Kibana - Monitoring Management - Delete Project Monitors](https://discuss.elastic.co/t/kibana-monitoring-management-delete-project-monitors/314631)

<div class="topic-metadata">

**Author:** [@adsandie](https://discuss.elastic.co/u/adsandie)\
**Replies:** 6\
**Last updated:** [September 20, 2022, 5:03pm UTC](https://discuss.elastic.co/t/kibana-monitoring-management-delete-project-monitors/314631 "2022-09-20T17:03:15Z")

</div>

Hi, i tested docker elastic-agent-complete 8.4.1 and created a test uptime/synthetics project monitor, how do you delete it? It is saying that the monitor was added as an external project. to delete the monitor, remove i…

---

## [How to cover all conditions when fetch all data with scroll?](https://discuss.elastic.co/t/how-to-cover-all-conditions-when-fetch-all-data-with-scroll/213461)

<div class="topic-metadata">

**Author:** [@riverbuilding](https://discuss.elastic.co/u/riverbuilding)\
**Replies:** 6\
**Last updated:** [January 3, 2020, 12:53pm UTC](https://discuss.elastic.co/t/how-to-cover-all-conditions-when-fetch-all-data-with-scroll/213461 "2020-01-03T12:53:21Z")

</div>

based on this discuss: the content I quote below: Short answer: yes, if you have a single shard index (as seems to be in your case) - it is expected behavior, but it can happen even if you have multiple shards. Longer…

---

## [Source exclude wrong when field is empty](https://discuss.elastic.co/t/source-exclude-wrong-when-field-is-empty/108884)

<div class="topic-metadata">

**Author:** [@Dolgy](https://discuss.elastic.co/u/Dolgy)\
**Replies:** 6\
**Last updated:** [November 27, 2017, 3:02pm UTC](https://discuss.elastic.co/t/source-exclude-wrong-when-field-is-empty/108884 "2017-11-27T15:02:44Z")

</div>

Hy, I'm trying to exclude one field from my data and is working wrong on ES 6 Query GET /warehouses/doc/\_search { "query": { "bool": { "must": { "match\_all": {} } } }, "\_source": { …

---

## [Elasticsearch Gist Operator so you can declare your indices and templates as a Kubernetes custom resource, feedback welcome!](https://discuss.elastic.co/t/elasticsearch-gist-operator-so-you-can-declare-your-indices-and-templates-as-a-kubernetes-custom-resource-feedback-welcome/233175)

<div class="topic-metadata">

**Author:** [@frankkoornstra](https://discuss.elastic.co/u/frankkoornstra)\
**Replies:** 0\
**Last updated:** [May 18, 2020, 6:24pm UTC](https://discuss.elastic.co/t/elasticsearch-gist-operator-so-you-can-declare-your-indices-and-templates-as-a-kubernetes-custom-resource-feedback-welcome/233175 "2020-05-18T18:24:35Z")

</div>

Hi :wave: Just wanted to let you know that I've released the first alpha version of a new Kubernetes Operator that manages the gist of the cluster, namely indices and templates (so far). You can find it here: https://gi…

---

## [Elastic Endpoint cannot connect to agent](https://discuss.elastic.co/t/elastic-endpoint-cannot-connect-to-agent/362030)

<div class="topic-metadata">

**Author:** [@marcussjogren](https://discuss.elastic.co/u/marcussjogren)\
**Replies:** 5\
**Last updated:** [June 28, 2024, 12:22pm UTC](https://discuss.elastic.co/t/elastic-endpoint-cannot-connect-to-agent/362030 "2024-06-28T12:22:26Z")

</div>

Hi, I have enrolled Elastic Endpoint via Fleet, but I cannot seem to get it working and there is very little troubleshooting information available. I am receiving the below errors when the Endpoint is starting and I ca…

---

## [Assigning ILM for metricbeat](https://discuss.elastic.co/t/assigning-ilm-for-metricbeat/253160)

<div class="topic-metadata">

**Author:** [@elasticforme](https://discuss.elastic.co/u/elasticforme)\
**Replies:** 5\
**Last updated:** [November 16, 2020, 9:49am UTC](https://discuss.elastic.co/t/assigning-ilm-for-metricbeat/253160 "2020-11-16T09:49:08Z")

</div>

I have started metricbeat used custome field.yml file to load template. I have following in metricbeat.yml setup.template.fields: "fields.yml" setup.ilm.enabled: auto setup.template.overwrite: true now I started met…

---

## [Machine Learning in Kibana - Jobs list could not be retrieved](https://discuss.elastic.co/t/machine-learning-in-kibana-jobs-list-could-not-be-retrieved/91682)

<div class="topic-metadata">

**Author:** [@jacaraba](https://discuss.elastic.co/u/jacaraba)\
**Replies:** 5\
**Last updated:** [July 7, 2017, 2:30pm UTC](https://discuss.elastic.co/t/machine-learning-in-kibana-jobs-list-could-not-be-retrieved/91682 "2017-07-07T14:30:22Z")

</div>

Hi guys, I have installed Elasticsearch 5.4.3 and Kibana 5.4.3 in the same server. They are communicating through their ip address at ports 9200 and 5601 respectively. Kibana is being accessed behind a proxy. I have …

---

## ["No active shards" error in 0.9](https://discuss.elastic.co/t/no-active-shards-error-in-0-9/3236)

<div class="topic-metadata">

**Author:** [@Lenak](https://discuss.elastic.co/u/Lenak)\
**Replies:** 5\
**Last updated:** [August 19, 2010, 5:13pm UTC](https://discuss.elastic.co/t/no-active-shards-error-in-0-9/3236 "2010-08-19T17:13:29Z")

</div>

Hello, Shay We are working with 0.9 version and have two nodes in our cluster – one data node and one client node. Cluster discovery zen tcp. In the client side we got exception “No active shards”. What is a reaso…

---

## [Feed GeoLocation over WAN](https://discuss.elastic.co/t/feed-geolocation-over-wan/96636)

<div class="topic-metadata">

**Author:** [@Dami](https://discuss.elastic.co/u/Dami)\
**Replies:** 8\
**Last updated:** [August 16, 2017, 9:45pm UTC](https://discuss.elastic.co/t/feed-geolocation-over-wan/96636 "2017-08-16T21:45:12Z")

</div>

Is there any way I can get client location without GeoIP ingest plugin? I’m using the available modules for filebeat and metricbeat, and also about to include heartbeat and packetbeat.

---

## [Firewall Configuration for winlogbeat](https://discuss.elastic.co/t/firewall-configuration-for-winlogbeat/109377)

<div class="topic-metadata">

**Author:** [@rahul01](https://discuss.elastic.co/u/rahul01)\
**Replies:** 3\
**Last updated:** [November 28, 2017, 2:10pm UTC](https://discuss.elastic.co/t/firewall-configuration-for-winlogbeat/109377 "2017-11-28T14:10:22Z")

</div>

Hello, I'm using winlogbeat 6.0 and output to kafka on 10001 port. So how does winlogbeat works in firewall? Do I need to create inbound rule or outbound rule in windows server 2012 client?

---

## [Dashboards and indices lost](https://discuss.elastic.co/t/dashboards-and-indices-lost/93569)

<div class="topic-metadata">

**Author:** [@leoponton](https://discuss.elastic.co/u/leoponton)\
**Replies:** 3\
**Last updated:** [July 25, 2017, 9:16am UTC](https://discuss.elastic.co/t/dashboards-and-indices-lost/93569 "2017-07-25T09:16:38Z")

</div>

Periodically Kibana or Logstash loses its memory. Even though I have created and saved dashboards I receive the following message: Looks like you don’t have any dashboards. Let’s create some! Similarly with indices …

---

## [How get the just enough information when manually merge the search result by shards?](https://discuss.elastic.co/t/how-get-the-just-enough-information-when-manually-merge-the-search-result-by-shards/39184)

<div class="topic-metadata">

**Author:** [@wuranbo](https://discuss.elastic.co/u/wuranbo)\
**Replies:** 3\
**Last updated:** [January 15, 2016, 2:48pm UTC](https://discuss.elastic.co/t/how-get-the-just-enough-information-when-manually-merge-the-search-result-by-shards/39184 "2016-01-15T14:48:20Z")

</div>

Shortly, I want to manually control which shard and when the search will run on, and merge the result myself. All depends on the shards preference API. That is how I think a workaround to give the long-term-running-backg…

---

## [Connection refused in cluster configuration](https://discuss.elastic.co/t/connection-refused-in-cluster-configuration/309293)

<div class="topic-metadata">

**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\
**Replies:** 1\
**Last updated:** [July 14, 2022, 9:03am UTC](https://discuss.elastic.co/t/connection-refused-in-cluster-configuration/309293 "2022-07-14T09:03:33Z")

</div>

I am using elasticsearch and have outgrown one server. Therefore, I would like to create a cluster configuration of two elasticsearch servers with the following manual. I have deployed elasticsearch on two servers, bu…

---

## [Filebeat custom module is not parsing logs correctly](https://discuss.elastic.co/t/filebeat-custom-module-is-not-parsing-logs-correctly/93902)

<div class="topic-metadata">

**Author:** [@stack\_overflow](https://discuss.elastic.co/u/stack_overflow)\
**Replies:** 1\
**Last updated:** [July 24, 2017, 12:43pm UTC](https://discuss.elastic.co/t/filebeat-custom-module-is-not-parsing-logs-correctly/93902 "2017-07-24T12:43:27Z")

</div>

Hey I created a custom module in filebeat module directory for glassfish server logs, I could not use command make create-fileset to create a fileset in my windows, I was getting error. So I just updated apache2 folde…

---

## [How to pass a parameter from Kibana dashboard link to Elasticsearch rest client?](https://discuss.elastic.co/t/how-to-pass-a-parameter-from-kibana-dashboard-link-to-elasticsearch-rest-client/55899)

<div class="topic-metadata">

**Author:** [@bounddog](https://discuss.elastic.co/u/bounddog)\
**Replies:** 1\
**Last updated:** [July 21, 2016, 4:59pm UTC](https://discuss.elastic.co/t/how-to-pass-a-parameter-from-kibana-dashboard-link-to-elasticsearch-rest-client/55899 "2016-07-21T16:59:05Z")

</div>

Hi Team, The elastic stack is great thing which made the log collection and virtualization so easy. Thank you all for providing such great tools. I secured my Elasticsearch rest API with an open source plugin, and any…

---

## [ECE + AWS load balancer: port configuration?](https://discuss.elastic.co/t/ece-aws-load-balancer-port-configuration/207129)

<div class="topic-metadata">

**Author:** [@mesiasc](https://discuss.elastic.co/u/mesiasc)\
**Replies:** 2\
**Last updated:** [November 12, 2019, 10:04am UTC](https://discuss.elastic.co/t/ece-aws-load-balancer-port-configuration/207129 "2019-11-12T10:04:48Z")

</div>

I have a load balancer in front of ECE to front the cluster URLs for kibana and elasticsearch. These all use port 9243 and the config in the ECE UI allows me to set a CNAME to be used instead of the ip.es.io service... T…

---

## [Automated import of Kibana dashboards using API](https://discuss.elastic.co/t/automated-import-of-kibana-dashboards-using-api/185537)

<div class="topic-metadata">

**Author:** [@Sridattam](https://discuss.elastic.co/u/Sridattam)\
**Replies:** 2\
**Last updated:** [July 9, 2019, 4:33am UTC](https://discuss.elastic.co/t/automated-import-of-kibana-dashboards-using-api/185537 "2019-07-09T04:33:10Z")

</div>

Hi All, We have 2 clusters in openshift which uses default EFK stack. We are looking to import the dashboards from kibana from cluster1 to kibana cluster2. I know its simple when we do manually, is there a way to send e…

---

## [Parsing XML managing arrays and multilines](https://discuss.elastic.co/t/parsing-xml-managing-arrays-and-multilines/64540)

<div class="topic-metadata">

**Author:** [@espogian](https://discuss.elastic.co/u/espogian)\
**Replies:** 2\
**Last updated:** [November 4, 2016, 6:25am UTC](https://discuss.elastic.co/t/parsing-xml-managing-arrays-and-multilines/64540 "2016-11-04T06:25:03Z")

</div>

Hi everyone, I'm dealing with a huge XML and I'm trying to proceed step-by-step. For the moment I'm experiencing difficulties with multiline and arrays management by Logstash. This is the simplified XML I'm trying to…

---

## [Visual Builder - Inquiry on Moving Average](https://discuss.elastic.co/t/visual-builder-inquiry-on-moving-average/109964)

<div class="topic-metadata">

**Author:** [@ayadirh](https://discuss.elastic.co/u/ayadirh)\
**Replies:** 4\
**Last updated:** [January 3, 2018, 11:07pm UTC](https://discuss.elastic.co/t/visual-builder-inquiry-on-moving-average/109964 "2018-01-03T23:07:44Z")

</div>

I am using Time series in Visual Builder. In Panel Option, the time interval is set to auto. Time Filter is set to "Today" or "Last 15 minutes" in Kibana. One line chart includes sum aggregation of a field (Eg. Money…

---

## [Node memory sizing advice](https://discuss.elastic.co/t/node-memory-sizing-advice/27788)

<div class="topic-metadata">

**Author:** [@emptyemail](https://discuss.elastic.co/u/emptyemail)\
**Replies:** 4\
**Last updated:** [August 20, 2015, 7:32pm UTC](https://discuss.elastic.co/t/node-memory-sizing-advice/27788 "2015-08-20T19:32:46Z")

</div>

Normally we allocate 50% of memory to ES and 50% to OS, what about in cases where the amount of disk space taken up is less than 50% of memory, does it make any sense to leave so much memory for the OS, or would there be…

---

## [ES + Hadoop = primary datastore?](https://discuss.elastic.co/t/es-hadoop-primary-datastore/25402)

<div class="topic-metadata">

**Author:** [@Luca\_Rondanini](https://discuss.elastic.co/u/Luca_Rondanini)\
**Replies:** 4\
**Last updated:** [July 15, 2015, 8:16pm UTC](https://discuss.elastic.co/t/es-hadoop-primary-datastore/25402 "2015-07-15T20:16:45Z")

</div>

Hi all, Let me start apologizing. This is a very common question but I'm not very familiar with Hadoop. I'm starting to work on a project that requires a very reliable data storage. I love ES and I would choose ES …

---

## [Java Transport Client Host Addresses](https://discuss.elastic.co/t/java-transport-client-host-addresses/102384)

<div class="topic-metadata">

**Author:** [@Gaurav\_Kumar1](https://discuss.elastic.co/u/Gaurav_Kumar1)\
**Replies:** 3\
**Last updated:** [October 2, 2017, 11:32am UTC](https://discuss.elastic.co/t/java-transport-client-host-addresses/102384 "2017-10-02T11:32:50Z")

</div>

Hi All, We are having 15 machines ElasticSearch cluster of version 5.6.0, out of which only 5 machines are defined as master eligible and all 15 machines are defined as data nodes. Now If we are using Java Transport Cl…

---

## [Elasticsearch 8.1 fail to start](https://discuss.elastic.co/t/elasticsearch-8-1-fail-to-start/299524)

<div class="topic-metadata">

**Author:** [@mayayisim](https://discuss.elastic.co/u/mayayisim)\
**Replies:** 1\
**Last updated:** [March 13, 2022, 12:37pm UTC](https://discuss.elastic.co/t/elasticsearch-8-1-fail-to-start/299524 "2022-03-13T12:37:27Z")

</div>

Good day Please assist with Elasticsearch failing to start, I checked the logs and its complaining about access denied on /var/run/Elasticsearch. I then created the path and now it's complaining about the Elasticsearch.…

---

## [Filebeat 8.0.0-rc2 dynamic data stream name](https://discuss.elastic.co/t/filebeat-8-0-0-rc2-dynamic-data-stream-name/296397)

<div class="topic-metadata">

**Author:** [@WouterAA](https://discuss.elastic.co/u/WouterAA)\
**Replies:** 7\
**Last updated:** [February 8, 2022, 4:53pm UTC](https://discuss.elastic.co/t/filebeat-8-0-0-rc2-dynamic-data-stream-name/296397 "2022-02-08T16:53:14Z")

</div>

Hello, we use filebeat on a k8s cluster to store logs per namespace. On filebeat 7 we create an index per namespace. Filebeat 8.0.0-rc2 uses data streams by default, which we think is a more elegant solution. However it …

---

## [Jq: error (at \<stdin\>:1): Cannot index string with string “Labels”](https://discuss.elastic.co/t/jq-error-at-stdin-1-cannot-index-string-with-string-labels/129655)

<div class="topic-metadata">

**Author:** [@siva1](https://discuss.elastic.co/u/siva1)\
**Replies:** 1\
**Last updated:** [April 26, 2018, 12:45pm UTC](https://discuss.elastic.co/t/jq-error-at-stdin-1-cannot-index-string-with-string-labels/129655 "2018-04-26T12:45:10Z")

</div>

Hi guys, while collecting the running containers, i am getting this error getRunningContainers() { curl --no-buffer -s -XGET --unix-socket /tmp/docker.sock http:/containers/json | jq -r '.\[\] | select(.Labels\["filebea…

---

## [Logstash Unable to maintain connection to ES](https://discuss.elastic.co/t/logstash-unable-to-maintain-connection-to-es/114974)

<div class="topic-metadata">

**Author:** [@Austin\_E](https://discuss.elastic.co/u/Austin_E)\
**Replies:** 7\
**Last updated:** [January 17, 2018, 9:18pm UTC](https://discuss.elastic.co/t/logstash-unable-to-maintain-connection-to-es/114974 "2018-01-17T21:18:46Z")

</div>

I setup a stock ES node and a stock Logstash node on the same physical machine(myelastic). I've made 7 changes to the node (node name, cluster name, host, logpath, datapath, locking memory, 31gb of RAM). Kibana can work …

---

## [Combine Dashboards](https://discuss.elastic.co/t/combine-dashboards/94759)

<div class="topic-metadata">

**Author:** [@keshore12](https://discuss.elastic.co/u/keshore12)\
**Replies:** 1\
**Last updated:** [July 27, 2017, 3:13pm UTC](https://discuss.elastic.co/t/combine-dashboards/94759 "2017-07-27T15:13:30Z")

</div>

How can i combine different dashboards and view them in single page with nav bar to switch between them. Is there any application which perform similar functionality.

---

## [Can logstash configuration have two different inputs with the same port?](https://discuss.elastic.co/t/can-logstash-configuration-have-two-different-inputs-with-the-same-port/27406)

<div class="topic-metadata">

**Author:** [@Diman\_Ghazi](https://discuss.elastic.co/u/Diman_Ghazi)\
**Replies:** 1\
**Last updated:** [August 15, 2015, 7:00am UTC](https://discuss.elastic.co/t/can-logstash-configuration-have-two-different-inputs-with-the-same-port/27406 "2015-08-15T07:00:08Z")

</div>

Hi, I am fairly new in Logstash. I am trying to have two inputs with the same port but different type and tag. e.g: input { tcp { port =\> 5000 type =\> "x" tags =\> \["x"\] } log4j { …

---

## [Sorting a nested array](https://discuss.elastic.co/t/sorting-a-nested-array/18779)

<div class="topic-metadata">

**Author:** [@Darin\_Amos](https://discuss.elastic.co/u/Darin_Amos)\
**Replies:** 1\
**Last updated:** [July 22, 2014, 3:11am UTC](https://discuss.elastic.co/t/sorting-a-nested-array/18779 "2014-07-22T03:11:07Z")

</div>

Hi Everyone, I am looking for a little guidance on how to setup my indexes to support sorting a nested array. To give a simple example, we have an index of products in our index, below is a dummy example document:…

---

## [Put Max date filter by default in Kibana](https://discuss.elastic.co/t/put-max-date-filter-by-default-in-kibana/179346)

<div class="topic-metadata">

**Author:** [@suhasgupta1](https://discuss.elastic.co/u/suhasgupta1)\
**Replies:** 3\
**Last updated:** [May 20, 2019, 6:55am UTC](https://discuss.elastic.co/t/put-max-date-filter-by-default-in-kibana/179346 "2019-05-20T06:55:27Z")

</div>

Hi All, My question is related to Is that possible today? I want to put filter by default in Kibana dashboard which will always select max date from date field. Is it possible with Query DSL if yes kindly tell how ? …

---

## [Shipping Logs to Logstash not Working](https://discuss.elastic.co/t/shipping-logs-to-logstash-not-working/102892)

<div class="topic-metadata">

**Author:** [@elaair](https://discuss.elastic.co/u/elaair)\
**Replies:** 3\
**Last updated:** [October 6, 2017, 2:57am UTC](https://discuss.elastic.co/t/shipping-logs-to-logstash-not-working/102892 "2017-10-06T02:57:37Z")

</div>

I thought I would take moment today to see how I could ship Windows logs from endpoints to Elastic. I set up a basic winlogbeats, config shown below: winlogbeat.event\_logs: - name: Application #ignore\_older: 24h …

---

## [Kibana Visualization error \>\> Esaags error - Bad Request](https://discuss.elastic.co/t/kibana-visualization-error-esaags-error-bad-request/297448)

<div class="topic-metadata">

**Author:** [@Sandeep\_Raju](https://discuss.elastic.co/u/Sandeep_Raju)\
**Replies:** 6\
**Last updated:** [February 23, 2022, 9:52am UTC](https://discuss.elastic.co/t/kibana-visualization-error-esaags-error-bad-request/297448 "2022-02-23T09:52:46Z")

</div>

Hi, i'm trying to build a visualization with a scripted field, but everytime it shows above error with no details. There is no other info apart from : kibana Visualization error \>\> Esaags error - Bad Request It displa…

---

## [Tilemap not showing geohash coordinates](https://discuss.elastic.co/t/tilemap-not-showing-geohash-coordinates/82070)

<div class="topic-metadata">

**Author:** [@kmrychl](https://discuss.elastic.co/u/kmrychl)\
**Replies:** 6\
**Last updated:** [April 17, 2017, 1:56pm UTC](https://discuss.elastic.co/t/tilemap-not-showing-geohash-coordinates/82070 "2017-04-17T13:56:25Z")

</div>

I'm in Kibana and ElasticSearch 5.3.0. I have a geojson of type polygon. First, I tried to map it as a geo\_shape, but this threw an error on tilemap visualization in Kibana that there was no geo\_point. I then tried to ch…

---

## [Referencing fields in Metrics output](https://discuss.elastic.co/t/referencing-fields-in-metrics-output/60869)

<div class="topic-metadata">

**Author:** [@Kryten](https://discuss.elastic.co/u/Kryten)\
**Replies:** 6\
**Last updated:** [February 7, 2017, 12:14pm UTC](https://discuss.elastic.co/t/referencing-fields-in-metrics-output/60869 "2017-02-07T12:14:51Z")

</div>

Hi, I'm trying to output a custom formatted line which must include: Events per second metric. The LS hostname. I have this metric filter in the "filter" section: metrics { meter =\> "events" add\_tag =\> "me…

---

## [PostgreSQL "LIKE" alternative: Custom Tokenizer for both way edgeNGram?](https://discuss.elastic.co/t/postgresql-like-alternative-custom-tokenizer-for-both-way-edgengram/87973)

<div class="topic-metadata">

**Author:** [@Aldo\_Sarmiento](https://discuss.elastic.co/u/Aldo_Sarmiento)\
**Replies:** 5\
**Last updated:** [June 2, 2017, 11:08pm UTC](https://discuss.elastic.co/t/postgresql-like-alternative-custom-tokenizer-for-both-way-edgengram/87973 "2017-06-02T23:08:15Z")

</div>

In PostgreSQL there's a LIKE clause where you can wildcard a search term like WHERE content LIKE '%blue%'. This will match any record where the content column contains "blue". I was thinking that with ElasticSearch, …

---

## [Standard rule of thumb to determine when to go from 1 shard to 2 and so on?](https://discuss.elastic.co/t/standard-rule-of-thumb-to-determine-when-to-go-from-1-shard-to-2-and-so-on/49189)

<div class="topic-metadata">

**Author:** [@Zelfapp](https://discuss.elastic.co/u/Zelfapp)\
**Replies:** 5\
**Last updated:** [May 5, 2016, 10:33am UTC](https://discuss.elastic.co/t/standard-rule-of-thumb-to-determine-when-to-go-from-1-shard-to-2-and-so-on/49189 "2016-05-05T10:33:08Z")

</div>

What is a good rule of thumb for determining when to shard an elasticsearch index? I can't seem to find a definitive answer on how to decide this. For an ecommerce driven database is there a standard formula for determin…

---

## [ES 2.1.1 poor indexing performance compared to 1.7.3](https://discuss.elastic.co/t/es-2-1-1-poor-indexing-performance-compared-to-1-7-3/38491)

<div class="topic-metadata">

**Author:** [@zamblauskas](https://discuss.elastic.co/u/zamblauskas)\
**Replies:** 5\
**Last updated:** [January 7, 2016, 12:54pm UTC](https://discuss.elastic.co/t/es-2-1-1-poor-indexing-performance-compared-to-1-7-3/38491 "2016-01-07T12:54:32Z")

</div>

Trying to understand the reason why 2.x ES has such poor indexing performance compared to the older 1.x. Vanilla ES install, simple index request: HDD machine: 1.7.3 ~20ms, 2.1.1 ~100ms. SSD machine: 1.7.3 ~20ms, 2.1.…

---

## [Logstash filter for displaying top exception names occurred in spring boot application](https://discuss.elastic.co/t/logstash-filter-for-displaying-top-exception-names-occurred-in-spring-boot-application/226935)

<div class="topic-metadata">

**Author:** [@Mohammed\_Siddiq](https://discuss.elastic.co/u/Mohammed_Siddiq)\
**Replies:** 2\
**Last updated:** [April 8, 2020, 6:01am UTC](https://discuss.elastic.co/t/logstash-filter-for-displaying-top-exception-names-occurred-in-spring-boot-application/226935 "2020-04-08T06:01:51Z")

</div>

Hi Magnus, I have recently started using ELK, I have been assigned to do ELK integration in my project. I have installed 7.6.1 of ELK and filebeat. I need your assistance is configuring filter for logstash to achieve ta…

---

## [Transaction.duration.us](https://discuss.elastic.co/t/transaction-duration-us/162332)

<div class="topic-metadata">

**Author:** [@TrumanDu](https://discuss.elastic.co/u/TrumanDu)\
**Replies:** 2\
**Last updated:** [January 3, 2019, 1:00am UTC](https://discuss.elastic.co/t/transaction-duration-us/162332 "2019-01-03T01:00:39Z")

</div>

transaction.duration.us Total duration of this transaction, in microseconds. my data is but apm ui How should I understand?

---

## [org.elasticsearch.hadoop.rest.EsHadoopNoNodesLeftException: Connection error (check network and/or proxy settings)- all nodes failed; tried \[\[172.24.191.234:9010, 172.24.191.231:9010, 172.24.191.233:9010\]\]](https://discuss.elastic.co/t/org-elasticsearch-hadoop-rest-eshadoopnonodesleftexception-connection-error-check-network-and-or-proxy-settings-all-nodes-failed-tried-172-24-191-234-9010-172-24-191-231-9010-172-24-191-233-9010/150957)

<div class="topic-metadata">

**Author:** [@bpaul](https://discuss.elastic.co/u/bpaul)\
**Replies:** 2\
**Last updated:** [October 5, 2018, 6:57am UTC](https://discuss.elastic.co/t/org-elasticsearch-hadoop-rest-eshadoopnonodesleftexception-connection-error-check-network-and-or-proxy-settings-all-nodes-failed-tried-172-24-191-234-9010-172-24-191-231-9010-172-24-191-233-9010/150957 "2018-10-05T06:57:28Z")

</div>

Hello guys, I am trying to export data from hadoop into elastic search. The Map reduce job is getting failed and the daeomon of elastic search is automatically shutting down.I have configured 4 nodes to form an elastic s…

---

## [Twitter plugin giving errors](https://discuss.elastic.co/t/twitter-plugin-giving-errors/78964)

<div class="topic-metadata">

**Author:** [@jaijhala](https://discuss.elastic.co/u/jaijhala)\
**Replies:** 2\
**Last updated:** [March 20, 2017, 7:59pm UTC](https://discuss.elastic.co/t/twitter-plugin-giving-errors/78964 "2017-03-20T19:59:46Z")

</div>

I'm trying to implement this example in my lab -\> https://github.com/elastic/examples/tree/master/ElasticStack\_twitter I'm using version 5.2.1 But when I start logstash I'm seeing below errors -\> \[2017-03-16T22:32…

---

## [Insert into elastic from spark: Connection error - all nodes failed](https://discuss.elastic.co/t/insert-into-elastic-from-spark-connection-error-all-nodes-failed/77657)

<div class="topic-metadata">

**Author:** [@Netanel\_Malka](https://discuss.elastic.co/u/Netanel_Malka)\
**Replies:** 2\
**Last updated:** [March 15, 2017, 9:43am UTC](https://discuss.elastic.co/t/insert-into-elastic-from-spark-connection-error-all-nodes-failed/77657 "2017-03-15T09:43:00Z")

</div>

Hi, I tried to insert 580 docs(~2MB size) to es but I got this message, when i tried to decrease the number of docs to 50 the job success. I am working with one spark partition, tried to tweak the batch size and the b…

---

## [Invalid date, showing in discovery tab \[KIbana\]](https://discuss.elastic.co/t/invalid-date-showing-in-discovery-tab-kibana/39517)

<div class="topic-metadata">

**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\
**Replies:** 2\
**Last updated:** [January 19, 2016, 4:25pm UTC](https://discuss.elastic.co/t/invalid-date-showing-in-discovery-tab-kibana/39517 "2016-01-19T16:25:31Z")

</div>

Hi , I am sending the data through java api in elasticsearch. I have created the mapping like "mappings":{"default":{"properties":{"DateTime":{"type":"date","format":"dd-MM-yyyy HH:mm:ss.SSS","store":true}}}} DateT…

---

## [Field name cannot be an empty string](https://discuss.elastic.co/t/field-name-cannot-be-an-empty-string/137121)

<div class="topic-metadata">

**Author:** [@viewmithun](https://discuss.elastic.co/u/viewmithun)\
**Replies:** 1\
**Last updated:** [June 23, 2018, 5:45pm UTC](https://discuss.elastic.co/t/field-name-cannot-be-an-empty-string/137121 "2018-06-23T17:45:18Z")

</div>

Hi Team, I am trying to transport bulk reports from a different VM (192.168.0.xxx) to Elasticsearch machine (192.168.0.xxx). I saw the below error in /var/log/elasticsearch/elasticsearch.log Error: \[2018-06-18Txx:xx:…

---

## [Docker-compose file for Elasticsearch 5.0.0 docker image](https://discuss.elastic.co/t/docker-compose-file-for-elasticsearch-5-0-0-docker-image/64145)

<div class="topic-metadata">

**Author:** [@DK\_3](https://discuss.elastic.co/u/DK_3)\
**Replies:** 1\
**Last updated:** [October 30, 2016, 11:52am UTC](https://discuss.elastic.co/t/docker-compose-file-for-elasticsearch-5-0-0-docker-image/64145 "2016-10-30T11:52:05Z")

</div>

Is there a Docker-compose file available for Elasticsearch 5.0.0. I'm trying to launch but getting issues with elasticsearch.yml network.host: 0.0.0.0 bootstrap.memory\_lock: true elasticsearch | ERROR: bootstrap …

---

## [Forcemerge multiple indices = high fragmentation on disk?](https://discuss.elastic.co/t/forcemerge-multiple-indices-high-fragmentation-on-disk/265586)

<div class="topic-metadata">

**Author:** [@MichelV](https://discuss.elastic.co/u/MichelV)\
**Replies:** 8\
**Last updated:** [March 10, 2021, 4:25pm UTC](https://discuss.elastic.co/t/forcemerge-multiple-indices-high-fragmentation-on-disk/265586 "2021-03-10T16:25:42Z")

</div>

I'm applying an ILM policy on older (daily) indices. In warm phase I have enabled forcemerge to reduce the number of segments. If I assign the ILM policy to multiple indices, say 30 days, will the forcemerge run on all …

---

## [Kibana spaces not able to create using api](https://discuss.elastic.co/t/kibana-spaces-not-able-to-create-using-api/226052)

<div class="topic-metadata">

**Author:** [@Masood\_Azam](https://discuss.elastic.co/u/Masood_Azam)\
**Replies:** 8\
**Last updated:** [April 2, 2020, 2:33pm UTC](https://discuss.elastic.co/t/kibana-spaces-not-able-to-create-using-api/226052 "2020-04-02T14:33:28Z")

</div>

Hello, I am new to Kibana, I want to create spaces from web application. I am able to get all spaces define in Kibana. But once I try to post it’s give me error. Remote server not found 400 bad request. I am using the…

---

## [Error: Elasticsearch](https://discuss.elastic.co/t/error-elasticsearch/129644)

<div class="topic-metadata">

**Author:** [@jawad846](https://discuss.elastic.co/u/jawad846)\
**Replies:** 8\
**Last updated:** [April 26, 2018, 11:42am UTC](https://discuss.elastic.co/t/error-elasticsearch/129644 "2018-04-26T11:42:02Z")

</div>

Getting error, when starting elasticsearch root@ip-192-168-2-183:/usr/share/elasticsearch# ./bin/elasticsearch \[2018-04-26T10:42:39,743\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] \[node-1\] uncaught exception i…

---

## [The use of \`size\` and \`from\` parameter in a \`knn\` search](https://discuss.elastic.co/t/the-use-of-size-and-from-parameter-in-a-knn-search/343962)

<div class="topic-metadata">

**Author:** [@sbruinsje](https://discuss.elastic.co/u/sbruinsje)\
**Replies:** 4\
**Last updated:** [October 4, 2023, 8:13am UTC](https://discuss.elastic.co/t/the-use-of-size-and-from-parameter-in-a-knn-search/343962 "2023-10-04T08:13:24Z")

</div>

When doing a knn search there is a parameter k which specifies the number of best matching documents to return (approximately). You can also use the size parameter to determine the number of documents to return. Is there…

---

## [Suppress Kibana version mismatch warning from the logs](https://discuss.elastic.co/t/suppress-kibana-version-mismatch-warning-from-the-logs/178300)

<div class="topic-metadata">

**Author:** [@purple](https://discuss.elastic.co/u/purple)\
**Replies:** 4\
**Last updated:** [April 24, 2019, 6:15pm UTC](https://discuss.elastic.co/t/suppress-kibana-version-mismatch-warning-from-the-logs/178300 "2019-04-24T18:15:19Z")

</div>

I'm using ES v6.2.4 and Kibana v6.2.5 because the v6.2 branch on Kibana Github defaults to v6.2.5 (?) Since I cannot update my ES version, my logs are getting spammed with version mismatch warnings. You're running Kiba…

[Previous page](https://discuss.elastic.co/top.md?page=1034&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1036&per_page=50&period=all)
