# Top

**URL:** https://discuss.elastic.co/top.md?page=1045&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1046

---

## [Vega/Kibana : Data table that makes calculcations between aggregations](https://discuss.elastic.co/t/vega-kibana-data-table-that-makes-calculcations-between-aggregations/234323)

<div class="topic-metadata">

**Author:** [@elisavet](https://discuss.elastic.co/u/elisavet)\
**Replies:** 4\
**Last updated:** [May 28, 2020, 6:43am UTC](https://discuss.elastic.co/t/vega-kibana-data-table-that-makes-calculcations-between-aggregations/234323 "2020-05-28T06:43:20Z")

</div>

Hi! I want to do a data table in kibana like the following: That means, the 2 first columns are the sum of price and quantity and the 3rd column divides both sums to get a ratio. Also I want this to be dynamic to cha…

---

## [Rally custom benchmark-only pipeline / track without corpora](https://discuss.elastic.co/t/rally-custom-benchmark-only-pipeline-track-without-corpora/231878)

<div class="topic-metadata">

**Author:** [@crab86](https://discuss.elastic.co/u/crab86)\
**Replies:** 4\
**Last updated:** [May 12, 2020, 6:36am UTC](https://discuss.elastic.co/t/rally-custom-benchmark-only-pipeline-track-without-corpora/231878 "2020-05-12T06:36:10Z")

</div>

Hi there, i have an already provisioned elasticsearch setup with an Index that consist of around 30Million documents. I would like to benchmark this existing setup using esrally. In order to do so esrally provides the b…

---

## [Bringing up Dockerized Kibana for distribution including all saved objects](https://discuss.elastic.co/t/bringing-up-dockerized-kibana-for-distribution-including-all-saved-objects/227690)

<div class="topic-metadata">

**Author:** [@robertiansweetman](https://discuss.elastic.co/u/robertiansweetman)\
**Replies:** 4\
**Last updated:** [April 17, 2020, 11:32am UTC](https://discuss.elastic.co/t/bringing-up-dockerized-kibana-for-distribution-including-all-saved-objects/227690 "2020-04-17T11:32:16Z")

</div>

Would appreciate any pointers on this... Currently we pull the kibana:version image and user docker-compose to create a dev/test environment. Then, when both elastic and kibana are running we run another script to creat…

---

## [Unexpected behavior for autodiscover appenders with processors](https://discuss.elastic.co/t/unexpected-behavior-for-autodiscover-appenders-with-processors/171415)

<div class="topic-metadata">

**Author:** [@walfie](https://discuss.elastic.co/u/walfie)\
**Replies:** 4\
**Last updated:** [March 11, 2019, 3:25pm UTC](https://discuss.elastic.co/t/unexpected-behavior-for-autodiscover-appenders-with-processors/171415 "2019-03-11T15:25:53Z")

</div>

I'm trying to use autodiscover, where I have some processors defined in the templates config, as well as some processors defined in the appenders section under certain conditions, like so: filebeat.autodiscover: provi…

---

## [Plugin API - Response headers are not transient](https://discuss.elastic.co/t/plugin-api-response-headers-are-not-transient/173314)

<div class="topic-metadata">

**Author:** [@Simone\_Scarduzio](https://discuss.elastic.co/u/Simone_Scarduzio)\
**Replies:** 6\
**Last updated:** [March 31, 2019, 3:22pm UTC](https://discuss.elastic.co/t/plugin-api-response-headers-are-not-transient/173314 "2019-03-31T15:22:01Z")

</div>

From my Elasticsearch plugin, I want to set HTTP response headers. What I do is: threadPool.getThreadContext().addResponseHeader("header1","value1"); And this works, but when another request comes along, Elasticsearch…

---

## [Why we need to use saved searches in kibana?](https://discuss.elastic.co/t/why-we-need-to-use-saved-searches-in-kibana/158630)

<div class="topic-metadata">

**Author:** [@rajkumar.m](https://discuss.elastic.co/u/rajkumar.m)\
**Replies:** 6\
**Last updated:** [November 29, 2018, 6:56pm UTC](https://discuss.elastic.co/t/why-we-need-to-use-saved-searches-in-kibana/158630 "2018-11-29T18:56:59Z")

</div>

Hi Team, please explain why we need to use saved searches in kibana? what is the difference if we use the saved search vs search pattern in visualization. Please let me know how is it going to impact the performance T…

---

## [Configure highlighted part](https://discuss.elastic.co/t/configure-highlighted-part/295164)

<div class="topic-metadata">

**Author:** [@Pavel\_Maltsev](https://discuss.elastic.co/u/Pavel_Maltsev)\
**Replies:** 1\
**Last updated:** [January 27, 2022, 10:14pm UTC](https://discuss.elastic.co/t/configure-highlighted-part/295164 "2022-01-27T22:14:01Z")

</div>

Main question The user is looking for a name and enters the part of it, let's say au, and the document with the text paul is found. I would like to have the doc highlighted like p\<em\>au\</em\>l. How can I achieve it if …

---

## [Nodes constantly losing connection](https://discuss.elastic.co/t/nodes-constantly-losing-connection/262331)

<div class="topic-metadata">

**Author:** [@borna\_talebi](https://discuss.elastic.co/u/borna_talebi)\
**Replies:** 3\
**Last updated:** [January 27, 2021, 10:30am UTC](https://discuss.elastic.co/t/nodes-constantly-losing-connection/262331 "2021-01-27T10:30:37Z")

</div>

I have a 2-node cluster(archive and main) and today they start losing connection. These are the two logs that keep appearing: \[2021-01-27T10:26:55,816\]\[WARN \]\[o.e.g.PersistedClusterStateService\] \[XXXarchive.XXX.local\] …

---

## [Can i add field with the contents of current year?](https://discuss.elastic.co/t/can-i-add-field-with-the-contents-of-current-year/230439)

<div class="topic-metadata">

**Author:** [@mtudisco](https://discuss.elastic.co/u/mtudisco)\
**Replies:** 3\
**Last updated:** [April 30, 2020, 7:22pm UTC](https://discuss.elastic.co/t/can-i-add-field-with-the-contents-of-current-year/230439 "2020-04-30T19:22:23Z")

</div>

Hi, I've seen the notation in the output part of logstash to put %{+YYYY.MM.dd} to name the index, for instance: output { elasticsearch { hosts =\> \["host1:9200"\] index =\> "prefix-%{+YYYY.MM.dd}" user =\> e…

---

## [Nodes crashing from sudden Out of Memory error](https://discuss.elastic.co/t/nodes-crashing-from-sudden-out-of-memory-error/209890)

<div class="topic-metadata">

**Author:** [@ibailak1](https://discuss.elastic.co/u/ibailak1)\
**Replies:** 3\
**Last updated:** [December 3, 2019, 5:23pm UTC](https://discuss.elastic.co/t/nodes-crashing-from-sudden-out-of-memory-error/209890 "2019-12-03T17:23:51Z")

</div>

Hi, We are currently running ES 6.5 in 71 nodes using hot-warm architecture. We have 3 master nodes, 34 warm nodes and 34 hot nodes. Hot nodes have 64GB of RAM , 30GB of them for the heap. In the warm nodes we have 128G…

---

## [Elasticsarch Java API doesn't return same as direct call](https://discuss.elastic.co/t/elasticsarch-java-api-doesnt-return-same-as-direct-call/65799)

<div class="topic-metadata">

**Author:** [@IuriiSergiichuk](https://discuss.elastic.co/u/IuriiSergiichuk)\
**Replies:** 3\
**Last updated:** [November 15, 2016, 8:03am UTC](https://discuss.elastic.co/t/elasticsarch-java-api-doesnt-return-same-as-direct-call/65799 "2016-11-15T08:03:10Z")

</div>

Hi all, I'm trying to explore elasticsearch and it's Java API (I'm using 5.0 version) and right now have following problem. I've written query, that should filter docs by action and range: { "size": 0, "query": {…

---

## [Logstash shutdown with no error](https://discuss.elastic.co/t/logstash-shutdown-with-no-error/306807)

<div class="topic-metadata">

**Author:** [@Hosein\_Kashefikaram](https://discuss.elastic.co/u/Hosein_Kashefikaram)\
**Replies:** 2\
**Last updated:** [June 9, 2022, 4:43pm UTC](https://discuss.elastic.co/t/logstash-shutdown-with-no-error/306807 "2022-06-09T16:43:26Z")

</div>

I got following messages after starting Logstash Jun 09 10:48:10 local systemd\[1\]: Started logstash. Jun 09 10:48:10 local logstash\[3191\]: Using bundled JDK: /usr/share/logstash/jdk Jun 09 10:48:11 local logstash\[3191\]:…

---

## [ElasticSerch returns an error if the query contains strings with brackets and other characters](https://discuss.elastic.co/t/elasticserch-returns-an-error-if-the-query-contains-strings-with-brackets-and-other-characters/263611)

<div class="topic-metadata">

**Author:** [@mor\_mor](https://discuss.elastic.co/u/mor_mor)\
**Replies:** 2\
**Last updated:** [March 3, 2021, 5:39pm UTC](https://discuss.elastic.co/t/elasticserch-returns-an-error-if-the-query-contains-strings-with-brackets-and-other-characters/263611 "2021-03-03T17:39:47Z")

</div>

Description: The application has the ability to filter the date by key values. For example, if you need to display all items in which "Result: success"; For one of the keys, the value is always in the form of a JS objec…

---

## [Kibana에서 distinct list를 불러오는 방법](https://discuss.elastic.co/t/kibana-distinct-list/241090)

<div class="topic-metadata">

**Author:** [@4orty](https://discuss.elastic.co/u/4orty)\
**Replies:** 2\
**Last updated:** [July 29, 2020, 8:52am UTC](https://discuss.elastic.co/t/kibana-distinct-list/241090 "2020-07-29T08:52:51Z")

</div>

안녕하세요. elasticsearch에 저장된 데이터에 질의를 통해 특정 field의 distinct value list를 불러오고 싶습니다. kibana로 하는 방법과 e/s api를 통해 하는 방법 두가지 모두 알고싶은데 방법이 있나요? 제가 지금 해본 방법으로는 kibana에서 visualize에 들어가서 Buckets에 X-axis에 Terns, field명을 입력하고 Order…

---

## [Varnish grok pattern optimization](https://discuss.elastic.co/t/varnish-grok-pattern-optimization/52100)

<div class="topic-metadata">

**Author:** [@michbsd](https://discuss.elastic.co/u/michbsd)\
**Replies:** 2\
**Last updated:** [June 15, 2016, 2:02pm UTC](https://discuss.elastic.co/t/varnish-grok-pattern-optimization/52100 "2016-06-15T14:02:01Z")

</div>

Hi, I am looking for help in optimizing my grok pattern for my varnishncsa logs. This is what I have now: %{IP:ip1}, %{IP:ip2} - \\\[%{HTTPDATE:timestamp}\\\] %{WORD:method} '%{URIHOST:host}' '%{PATH:path}' '(?:%{URIP…

---

## [No handler for type \[attachment\] declared on field \[file\]](https://discuss.elastic.co/t/no-handler-for-type-attachment-declared-on-field-file/14349)

<div class="topic-metadata">

**Author:** [@samaswin](https://discuss.elastic.co/u/samaswin)\
**Replies:** 2\
**Last updated:** [November 11, 2013, 10:15am UTC](https://discuss.elastic.co/t/no-handler-for-type-attachment-declared-on-field-file/14349 "2013-11-11T10:15:33Z")

</div>

Hi, I have installed the FSRiver and mapper attachments in my ES. I have run the following script, But it always showing No handler for type \[attachment\] declared on field \[file\] error. I try all the solutions from…

---

## [Extract rows from log using http plugin](https://discuss.elastic.co/t/extract-rows-from-log-using-http-plugin/106344)

<div class="topic-metadata">

**Author:** [@mfellah](https://discuss.elastic.co/u/mfellah)\
**Replies:** 5\
**Last updated:** [November 22, 2017, 4:39pm UTC](https://discuss.elastic.co/t/extract-rows-from-log-using-http-plugin/106344 "2017-11-22T16:39:12Z")

</div>

Hi, I'm trying to use http plugin to receive log with this format : 2017-10-31-07:29:05 - DEBUG Waiting for callback, for command id : 56232 2017-10-31-07:29:05 - DEBUG Waiting for callback... 2017-10-31-07:29:06…

---

## [Kibana7.17.10 log rotation](https://discuss.elastic.co/t/kibana7-17-10-log-rotation/342313)

<div class="topic-metadata">

**Author:** [@Ekta](https://discuss.elastic.co/u/Ekta)\
**Replies:** 7\
**Last updated:** [September 6, 2023, 1:54pm UTC](https://discuss.elastic.co/t/kibana7-17-10-log-rotation/342313 "2023-09-06T13:54:47Z")

</div>

Hi Kibana version-7.17.10 OS - 22.04 ubuntu I want to log rotation daily basis in kibana for kibana log file Can you help here?

---

## [Date property is not recognised](https://discuss.elastic.co/t/date-property-is-not-recognised/220738)

<div class="topic-metadata">

**Author:** [@KibanaUser2](https://discuss.elastic.co/u/KibanaUser2)\
**Replies:** 7\
**Last updated:** [March 10, 2020, 10:08pm UTC](https://discuss.elastic.co/t/date-property-is-not-recognised/220738 "2020-03-10T22:08:32Z")

</div>

I am new to Kibana. I am facing a strange issue. I have an index which has date propety as well as timestamp. When I am trying to extract the date and month from the date property in scripted field , I am getting except…

---

## [Cluster Problem pt2](https://discuss.elastic.co/t/cluster-problem-pt2/190573)

<div class="topic-metadata">

**Author:** [@thev0yager](https://discuss.elastic.co/u/thev0yager)\
**Replies:** 7\
**Last updated:** [July 16, 2019, 2:55pm UTC](https://discuss.elastic.co/t/cluster-problem-pt2/190573 "2019-07-16T14:55:00Z")

</div>

Hi, all I have been working to get an elastic stack cluster. My configration and nodes look as follows. Sorry for the terrible drawing My elastic yml files look as such That is the elasticsearch.yml file for my sec…

---

## [TransportError(503, 'search\_phase\_execution\_exception') only while using python but not in kibana?](https://discuss.elastic.co/t/transporterror-503-search-phase-execution-exception-only-while-using-python-but-not-in-kibana/301164)

<div class="topic-metadata">

**Author:** [@Harish\_fragger](https://discuss.elastic.co/u/Harish_fragger)\
**Replies:** 1\
**Last updated:** [March 31, 2022, 11:50am UTC](https://discuss.elastic.co/t/transporterror-503-search-phase-execution-exception-only-while-using-python-but-not-in-kibana/301164 "2022-03-31T11:50:03Z")

</div>

I am using python to extract data from my Elasticsearch but suddenly started to get this error : TransportError(503, 'search\_phase\_execution\_exception'). I also have kibana working with the same Elasticsearch and I am ab…

---

## [Matching log.file.path with Grok](https://discuss.elastic.co/t/matching-log-file-path-with-grok/235649)

<div class="topic-metadata">

**Author:** [@Maria\_Daniel](https://discuss.elastic.co/u/Maria_Daniel)\
**Replies:** 1\
**Last updated:** [June 3, 2020, 11:28pm UTC](https://discuss.elastic.co/t/matching-log-file-path-with-grok/235649 "2020-06-03T23:28:59Z")

</div>

Hello! So, I'm trying to use the log filename to generate a new field that is searchable on Kibana. Currently I have this on my logstash pipeline: if "delivery\_conn\_results" in \[tags\] { grok { match =\> { …

---

## [Curator is not deleting the index?](https://discuss.elastic.co/t/curator-is-not-deleting-the-index/100688)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 1\
**Last updated:** [September 15, 2017, 1:09pm UTC](https://discuss.elastic.co/t/curator-is-not-deleting-the-index/100688 "2017-09-15T13:09:00Z")

</div>

Hi Experts, I have installed curator and I want to delete 1 day old index so with the help of document I have created action.yml file Action.yml actions: 1: action: delete\_indices description: \>- Dele…

---

## [Using aggregate filter for multi task\_id](https://discuss.elastic.co/t/using-aggregate-filter-for-multi-task-id/191564)

<div class="topic-metadata">

**Author:** [@sahere37](https://discuss.elastic.co/u/sahere37)\
**Replies:** 4\
**Last updated:** [July 24, 2019, 12:28pm UTC](https://discuss.elastic.co/t/using-aggregate-filter-for-multi-task-id/191564 "2019-07-24T12:28:24Z")

</div>

hi all I am using jmx plugin to ship WebLogic MBean into ELK. for this purpose, following script is using in logstash. input { jmx { path =\> "C:\\logstash\\jmxconf" polling\_frequency =\> 5 type =\> "jmx" nb\_thread …

---

## [Create n register repository for snapshots in elasticsearch](https://discuss.elastic.co/t/create-n-register-repository-for-snapshots-in-elasticsearch/138491)

<div class="topic-metadata">

**Author:** [@roshni](https://discuss.elastic.co/u/roshni)\
**Replies:** 4\
**Last updated:** [July 4, 2018, 7:23am UTC](https://discuss.elastic.co/t/create-n-register-repository-for-snapshots-in-elasticsearch/138491 "2018-07-04T07:23:27Z")

</div>

Hi I have successfully created a repository for snapshots - { "my\_fs\_backup" : { "type" : "fs", "settings" : { "compress" : "true", "chunk\_size" : "10m", "location" : "/mount/backups/my\_backup" } } } While c…

---

## [X-Pack 5.2.1: Role mappings never get applied to LDAP groups](https://discuss.elastic.co/t/x-pack-5-2-1-role-mappings-never-get-applied-to-ldap-groups/76127)

<div class="topic-metadata">

**Author:** [@mojogitoverhere](https://discuss.elastic.co/u/mojogitoverhere)\
**Replies:** 4\
**Last updated:** [March 10, 2017, 5:38am UTC](https://discuss.elastic.co/t/x-pack-5-2-1-role-mappings-never-get-applied-to-ldap-groups/76127 "2017-03-10T05:38:16Z")

</div>

I am trying to setup X-Pack 5.2.1 with LDAP. The users are able to be authenticated and its groups are retrieved, but the roles defined in role\_mapping.yml never get applied to the user. I tried a simple test by adding a…

---

## [Missing logstash-output-kinesis for Logstash 5.2?](https://discuss.elastic.co/t/missing-logstash-output-kinesis-for-logstash-5-2/73492)

<div class="topic-metadata">

**Author:** [@NirReuveny](https://discuss.elastic.co/u/NirReuveny)\
**Replies:** 4\
**Last updated:** [February 8, 2017, 9:20am UTC](https://discuss.elastic.co/t/missing-logstash-output-kinesis-for-logstash-5-2/73492 "2017-02-08T09:20:24Z")

</div>

There is no mention of such output plugin in the list of output plugins in the documentation... and when trying to install it I can the error below... Can't seem to find too much info online on this, only on the input p…

---

## [How index/type in ElasticSearch app can be visualize in Kabana](https://discuss.elastic.co/t/how-index-type-in-elasticsearch-app-can-be-visualize-in-kabana/34291)

<div class="topic-metadata">

**Author:** [@mpals](https://discuss.elastic.co/u/mpals)\
**Replies:** 4\
**Last updated:** [November 11, 2015, 9:50am UTC](https://discuss.elastic.co/t/how-index-type-in-elasticsearch-app-can-be-visualize-in-kabana/34291 "2015-11-11T09:50:40Z")

</div>

I am new to ElasticSearch and Kibana, I am try to integrate Spark with ES + Kibana for visualization. object SimpleApp { def main(args: Array\[String\]) { val conf = new SparkConf().setAppName("Spark-ES-Kibana") …

---

## [Find percentage of facets matched rather than number of matched documents](https://discuss.elastic.co/t/find-percentage-of-facets-matched-rather-than-number-of-matched-documents/8983)

<div class="topic-metadata">

**Author:** [@vineeth\_mohan](https://discuss.elastic.co/u/vineeth_mohan)\
**Replies:** 4\
**Last updated:** [September 14, 2012, 3:56pm UTC](https://discuss.elastic.co/t/find-percentage-of-facets-matched-rather-than-number-of-matched-documents/8983 "2012-09-14T15:56:21Z")

</div>

Hi , Is there any way i can find the percentage of facet name matched for a query rather than the number of documents having that facet. That is , instead of telling that there are 1000 documents which have a fa…

---

## [Logstash - With Filebeats and Netflow](https://discuss.elastic.co/t/logstash-with-filebeats-and-netflow/149075)

<div class="topic-metadata">

**Author:** [@Carlos\_Magalhaes](https://discuss.elastic.co/u/Carlos_Magalhaes)\
**Replies:** 5\
**Last updated:** [September 23, 2018, 5:50pm UTC](https://discuss.elastic.co/t/logstash-with-filebeats-and-netflow/149075 "2018-09-23T17:50:28Z")

</div>

Hi all, Been working with the ELK stack and loving it. A bit of a learning curve but finally got all working with dashboards etc. I have file beat reporting back from a FW and it is working really well to display my da…

---

## [Unable to start elasticsearch when configuring SSL](https://discuss.elastic.co/t/unable-to-start-elasticsearch-when-configuring-ssl/339030)

<div class="topic-metadata">

**Author:** [@Ryaninsolencee](https://discuss.elastic.co/u/Ryaninsolencee)\
**Replies:** 6\
**Last updated:** [July 25, 2023, 2:07am UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-when-configuring-ssl/339030 "2023-07-25T02:07:48Z")

</div>

Very new to ELK stack and ive been trying to tinker and figure out security configs , i already have kibana running on ssl and now im trying to configure elasticsearch. ive followed the guide and now it just refuses to s…

---

## [Metricbeat SQL Module : Unable to extract data from a custom query](https://discuss.elastic.co/t/metricbeat-sql-module-unable-to-extract-data-from-a-custom-query/279360)

<div class="topic-metadata">

**Author:** [@VinodKumarPotta](https://discuss.elastic.co/u/VinodKumarPotta)\
**Replies:** 6\
**Last updated:** [July 26, 2021, 2:35am UTC](https://discuss.elastic.co/t/metricbeat-sql-module-unable-to-extract-data-from-a-custom-query/279360 "2021-07-26T02:35:45Z")

</div>

Hi Team, Seek your expert advise on this. I have recently enabled Metricbeat sql module to extract data from a custom query. I have followed the instructions given in sql.yml file (SQL module | Metricbeat Reference \[7…

---

## [serverMap Module data exceptions](https://discuss.elastic.co/t/servermap-module-data-exceptions/278012)

<div class="topic-metadata">

**Author:** [@tttoad](https://discuss.elastic.co/u/tttoad)\
**Replies:** 6\
**Last updated:** [July 13, 2021, 8:35am UTC](https://discuss.elastic.co/t/servermap-module-data-exceptions/278012 "2021-07-13T08:35:35Z")

</div>

APM Server version 7.13.2 elasticSearch: 7.13.2 kibana: 7.13.2 The service node of the serverMap module on the Kibana Apm interface cannot be linked up. 1.run apm,es,kibana: docker network create -d bridge my-jaeger-n…

---

## [Filebeat with high memory consumption after logrotate](https://discuss.elastic.co/t/filebeat-with-high-memory-consumption-after-logrotate/243497)

<div class="topic-metadata">

**Author:** [@mohanisch](https://discuss.elastic.co/u/mohanisch)\
**Replies:** 6\
**Last updated:** [August 20, 2020, 7:56am UTC](https://discuss.elastic.co/t/filebeat-with-high-memory-consumption-after-logrotate/243497 "2020-08-20T07:56:12Z")

</div>

Hello! We use Filebeat (in Docker, version 7.8) to send logs to Logstash. Every night at 0:01 logrotate runs on the machine where Filebeat is running. It is rotating ~20-25 logfiles. Logrotate is configured with followi…

---

## [Translate Filter Destination](https://discuss.elastic.co/t/translate-filter-destination/133406)

<div class="topic-metadata">

**Author:** [@empfangsfehler](https://discuss.elastic.co/u/empfangsfehler)\
**Replies:** 8\
**Last updated:** [May 27, 2018, 3:19pm UTC](https://discuss.elastic.co/t/translate-filter-destination/133406 "2018-05-27T15:19:55Z")

</div>

Hi there, i would like to store my translated field as "dhcp.EventName" but it seems not to work, the field is never created or filled. I haven't found anything in the documentation about this. I tried the following co…

---

## [How to sum together values in different objects](https://discuss.elastic.co/t/how-to-sum-together-values-in-different-objects/209554)

<div class="topic-metadata">

**Author:** [@twright8](https://discuss.elastic.co/u/twright8)\
**Replies:** 2\
**Last updated:** [November 26, 2019, 7:24pm UTC](https://discuss.elastic.co/t/how-to-sum-together-values-in-different-objects/209554 "2019-11-26T19:24:29Z")

</div>

Hi, I have nested objects in an array. The objects are the same structure. I want to add together all \[array\]\[amount\] values (which are all numbers) where x can be any number up to around 40, to create a new field \[amoun…

---

## [Elasticsearch Best practice sizing](https://discuss.elastic.co/t/elasticsearch-best-practice-sizing/150782)

<div class="topic-metadata">

**Author:** [@fcalegari](https://discuss.elastic.co/u/fcalegari)\
**Replies:** 2\
**Last updated:** [October 3, 2018, 5:43am UTC](https://discuss.elastic.co/t/elasticsearch-best-practice-sizing/150782 "2018-10-03T05:43:20Z")

</div>

Hi , we need to know if Is writting a Best practice to sizing the elastic architecture. How many servers we need for the clúster? What disk space ,memory , cpu Is recommended for each server? Best practice to calculat…

---

## [ES and Kibana Endpoints Not Accessible](https://discuss.elastic.co/t/es-and-kibana-endpoints-not-accessible/147058)

<div class="topic-metadata">

**Author:** [@Ong](https://discuss.elastic.co/u/Ong)\
**Replies:** 2\
**Last updated:** [September 6, 2018, 6:53am UTC](https://discuss.elastic.co/t/es-and-kibana-endpoints-not-accessible/147058 "2018-09-06T06:53:54Z")

</div>

I have a cluster on ECE which runs on 1 availability zone. The end points for Elasticsearch and Kibana of the cluster are: https://918a2067fdcb4aafaea2a889abf3f87b.10.2.92.184.ip.es.io:9243 https://20b41f36ef3949aaa75…

---

## [Issues connecting kibana to elasticsearch cluster in kubernetes](https://discuss.elastic.co/t/issues-connecting-kibana-to-elasticsearch-cluster-in-kubernetes/103785)

<div class="topic-metadata">

**Author:** [@akpt](https://discuss.elastic.co/u/akpt)\
**Replies:** 2\
**Last updated:** [October 12, 2017, 8:23pm UTC](https://discuss.elastic.co/t/issues-connecting-kibana-to-elasticsearch-cluster-in-kubernetes/103785 "2017-10-12T20:23:16Z")

</div>

I have an elasticsearch cluster on kubernetes and I'm trying to connect kibana to it. Currently this is the kibana.yml file that I mount into the config directory for my kibana pod server.name: kibana-logging se…

---

## [JMX Metrics dashboard](https://discuss.elastic.co/t/jmx-metrics-dashboard/126080)

<div class="topic-metadata">

**Author:** [@mruthyu](https://discuss.elastic.co/u/mruthyu)\
**Replies:** 1\
**Last updated:** [March 29, 2018, 9:07pm UTC](https://discuss.elastic.co/t/jmx-metrics-dashboard/126080 "2018-03-29T21:07:42Z")

</div>

Do we have the generic JMX metrics dashboard? Currently I am using the Logstash with JMX input to get the JMX metrics and is being indexed into elasticsearch.

---

## [Timestamps in Range Query](https://discuss.elastic.co/t/timestamps-in-range-query/95219)

<div class="topic-metadata">

**Author:** [@Kryten](https://discuss.elastic.co/u/Kryten)\
**Replies:** 1\
**Last updated:** [July 31, 2017, 8:22pm UTC](https://discuss.elastic.co/t/timestamps-in-range-query/95219 "2017-07-31T20:22:05Z")

</div>

Hi, Would appreciate any assistance. I’m trying to get some data using this query: POST /agents-\*/\_search { "facets": { "2": { "query": { "filtered": { "query": { "query\_strin…

---

## [Kibana5 Oauth2 authentication with Xpack user roles](https://discuss.elastic.co/t/kibana5-oauth2-authentication-with-xpack-user-roles/76495)

<div class="topic-metadata">

**Author:** [@rags](https://discuss.elastic.co/u/rags)\
**Replies:** 1\
**Last updated:** [February 25, 2017, 11:53pm UTC](https://discuss.elastic.co/t/kibana5-oauth2-authentication-with-xpack-user-roles/76495 "2017-02-25T23:53:23Z")

</div>

Is it possible to use Xpack + an Oauth2 proxy for Kibana5? The reason for this is to keep Xpacks user roles and restrict access to index settings in the management panel, and still provide Oauth2 access. Right now with…

---

## [Logstash not finding installed gems](https://discuss.elastic.co/t/logstash-not-finding-installed-gems/74776)

<div class="topic-metadata">

**Author:** [@gmcgilli](https://discuss.elastic.co/u/gmcgilli)\
**Replies:** 1\
**Last updated:** [February 11, 2017, 9:17pm UTC](https://discuss.elastic.co/t/logstash-not-finding-installed-gems/74776 "2017-02-11T21:17:29Z")

</div>

Hi, I'm new to pretty the entire stack so learning. I'm having trouble getting logstash to recognize an installed gem that I want to use. I don't know if it matters but the gem was installed in the shared folder for so…

---

## [What is Search request rate panel in Marvel?](https://discuss.elastic.co/t/what-is-search-request-rate-panel-in-marvel/54172)

<div class="topic-metadata">

**Author:** [@vikas\_gopal](https://discuss.elastic.co/u/vikas_gopal)\
**Replies:** 1\
**Last updated:** [June 29, 2016, 2:49pm UTC](https://discuss.elastic.co/t/what-is-search-request-rate-panel-in-marvel/54172 "2016-06-29T14:49:11Z")

</div>

Hi Experts , I have an index and it has 43.5 million documents in 7 shards , I am monitoring marvel to check performance and this is what I got in marvel Couple of queries What 4.500 per 1s search request rate me…

---

## [Elastic Search Internals](https://discuss.elastic.co/t/elastic-search-internals/359470)

<div class="topic-metadata">

**Author:** [@chotukv](https://discuss.elastic.co/u/chotukv)\
**Replies:** 4\
**Last updated:** [May 14, 2024, 5:44pm UTC](https://discuss.elastic.co/t/elastic-search-internals/359470 "2024-05-14T17:44:17Z")

</div>

Can anyone point me out to any advanced course or research paper that dives deep into Elastic Search internals and how the architecture works internally in ES?

---

## [ElasticUI Tables](https://discuss.elastic.co/t/elasticui-tables/185769)

<div class="topic-metadata">

**Author:** [@rndrev](https://discuss.elastic.co/u/rndrev)\
**Replies:** 4\
**Last updated:** [June 14, 2019, 11:47pm UTC](https://discuss.elastic.co/t/elasticui-tables/185769 "2019-06-14T23:47:23Z")

</div>

Hi there, I'm developing a Kibana plugin and I want to use a table from Elastic UI. I want to use the EuiBasicTable. However, I don't understand how to get the demo running in my example plugin which I have created. On…

---

## [Logstash ruby filter issues with HTTP queries](https://discuss.elastic.co/t/logstash-ruby-filter-issues-with-http-queries/180017)

<div class="topic-metadata">

**Author:** [@ayesyev](https://discuss.elastic.co/u/ayesyev)\
**Replies:** 4\
**Last updated:** [May 7, 2019, 7:47pm UTC](https://discuss.elastic.co/t/logstash-ruby-filter-issues-with-http-queries/180017 "2019-05-07T19:47:13Z")

</div>

Hi there! I'm stuck with the issue, I have with an http client in my ruby filter in Logstash 6.5.4. Here is a snippet of the filter code require 'net/http' require 'uri' require 'json' def register(params) @http = …

---

## [Parse host url error docker event](https://discuss.elastic.co/t/parse-host-url-error-docker-event/164127)

<div class="topic-metadata">

**Author:** [@ncasaux](https://discuss.elastic.co/u/ncasaux)\
**Replies:** 4\
**Last updated:** [January 18, 2019, 3:41pm UTC](https://discuss.elastic.co/t/parse-host-url-error-docker-event/164127 "2019-01-18T15:41:25Z")

</div>

Hello, I try to use Metricbeat with the autodiscover feature for docker, with following config Metricbeat.yml: output.elasticsearch: hosts: \["elasticsearch:9200"\] setup.template.name: "metricbeat" setup.template.se…

---

## [Correct way to restart cluster / rejoin failed nodes](https://discuss.elastic.co/t/correct-way-to-restart-cluster-rejoin-failed-nodes/14575)

<div class="topic-metadata">

**Author:** [@Alastair\_James](https://discuss.elastic.co/u/Alastair_James)\
**Replies:** 4\
**Last updated:** [November 26, 2013, 12:01pm UTC](https://discuss.elastic.co/t/correct-way-to-restart-cluster-rejoin-failed-nodes/14575 "2013-11-26T12:01:15Z")

</div>

Hi there. I am currently 'stress testing' ES to see if it can cope with out projected analyitcs work load (50m docs / month, 12 month retention). I am using a cluster of 4x c3xlarge AWS instances (7.5GB ram, 4 c…

---

## [Elastic search went unavailable in Bitbucket](https://discuss.elastic.co/t/elastic-search-went-unavailable-in-bitbucket/196166)

<div class="topic-metadata">

**Author:** [@vnagana](https://discuss.elastic.co/u/vnagana)\
**Replies:** 2\
**Last updated:** [August 22, 2019, 1:25pm UTC](https://discuss.elastic.co/t/elastic-search-went-unavailable-in-bitbucket/196166 "2019-08-22T13:25:54Z")

</div>

Hi Team, Elastic search is completely broke in Bitbucket. Getting error that " Search is currently unavailable . Refresh the page and try again" . Error in logs: 2019-08-20 03:16:19,574 ERROR \[search-indexing:thread-1…

[Previous page](https://discuss.elastic.co/top.md?page=1044&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1046&per_page=50&period=all)
