# Top **URL:** https://discuss.elastic.co/top.md?page=1046&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1047 --- ## [Date filter, match, target and index name](https://discuss.elastic.co/t/date-filter-match-target-and-index-name/184400)
**Author:** [@arikfre](https://discuss.elastic.co/u/arikfre)\ **Replies:** 2\ **Last updated:** [June 5, 2019, 5:07pm UTC](https://discuss.elastic.co/t/date-filter-match-target-and-index-name/184400 "2019-06-05T17:07:41Z")
Hi, I have jdbc input that selects from MySQL. One of the fields is called report\_date from type datetime. filter { date { match =\> \[ "report\_date", "yyyy-MM-dd HH:mm:ss" \] target =\> "report\_date" } } output { e… --- ## [Percentage on canvas](https://discuss.elastic.co/t/percentage-on-canvas/182395)
**Author:** [@pathri](https://discuss.elastic.co/u/pathri)\ **Replies:** 2\ **Last updated:** [May 23, 2019, 7:42pm UTC](https://discuss.elastic.co/t/percentage-on-canvas/182395 "2019-05-23T19:42:17Z")
i was trying canvas and not able to understand the marked 51%, how exactly it is coming and what does {getCell "percentage"} mean? thanks in advance --- ## [Nested subquery similar to NOT IN SQL syntax](https://discuss.elastic.co/t/nested-subquery-similar-to-not-in-sql-syntax/147673)
**Author:** [@prwillmot](https://discuss.elastic.co/u/prwillmot)\ **Replies:** 2\ **Last updated:** [September 10, 2018, 6:59am UTC](https://discuss.elastic.co/t/nested-subquery-similar-to-not-in-sql-syntax/147673 "2018-09-10T06:59:47Z")
Am am trying to use ELK stack to monitor status of many 1000s of "terminals" in our environment we have built an index that contains timestamp and terminal\_id (along with other terminal properties) - ingested via filebe… --- ## [How to kill filebeat (docker) process?](https://discuss.elastic.co/t/how-to-kill-filebeat-docker-process/263561)
**Author:** [@skime](https://discuss.elastic.co/u/skime)\ **Replies:** 5\ **Last updated:** [February 9, 2021, 1:36pm UTC](https://discuss.elastic.co/t/how-to-kill-filebeat-docker-process/263561 "2021-02-09T13:36:54Z")
Hello, how can I kill filebeat process that was started on docker? Linux situation by "top" command: I have restarted docker daemon, and it don't want to start - probably because of the filebeat, last log from docker … --- ## [Displaying custom errors in Kibana APM using java agent](https://discuss.elastic.co/t/displaying-custom-errors-in-kibana-apm-using-java-agent/260817)
**Author:** [@Sefra](https://discuss.elastic.co/u/Sefra)\ **Replies:** 5\ **Last updated:** [January 13, 2021, 12:41pm UTC](https://discuss.elastic.co/t/displaying-custom-errors-in-kibana-apm-using-java-agent/260817 "2021-01-13T12:41:29Z")
If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea… --- ## [Filebeat 6.5.1 unable to send syslog](https://discuss.elastic.co/t/filebeat-6-5-1-unable-to-send-syslog/157819)
**Author:** [@princeOfMacedon](https://discuss.elastic.co/u/princeOfMacedon)\ **Replies:** 5\ **Last updated:** [November 27, 2018, 8:00am UTC](https://discuss.elastic.co/t/filebeat-6-5-1-unable-to-send-syslog/157819 "2018-11-27T08:00:31Z")
Hi all! I'm using filebeat 6.5.1 and I'm encountering this error: filebeat\[29062\]: Exiting: Can only start an input when all related states are finished: {Id:2537-66305 Finished:false Fileinfo:0xc420213860 Source:/var/… --- ## [Kibana 7.0.1 Installing X-Pack/Machine Learning](https://discuss.elastic.co/t/kibana-7-0-1-installing-x-pack-machine-learning/190094)
**Author:** [@etsai7](https://discuss.elastic.co/u/etsai7)\ **Replies:** 7\ **Last updated:** [July 16, 2019, 3:47pm UTC](https://discuss.elastic.co/t/kibana-7-0-1-installing-x-pack-machine-learning/190094 "2019-07-16T15:47:06Z")
Hello, I currently installed the ELK stack v7.0.1 configured for ElastiFlow. I am trying to look for the Machine Learning trial that usually appears on the Kibana Dashboard, but it is nowhere to be found. I have also b… --- ## [Logstash - line string - Geoshape](https://discuss.elastic.co/t/logstash-line-string-geoshape/184585)
**Author:** [@Raj\_Kumar](https://discuss.elastic.co/u/Raj_Kumar)\ **Replies:** 7\ **Last updated:** [June 13, 2019, 3:43pm UTC](https://discuss.elastic.co/t/logstash-line-string-geoshape/184585 "2019-06-13T15:43:28Z")
Hi There, Could anyone help me to add a new field called geolocalisation which includes source and destination coordinates . like "coordinates" : \[\[-77.03653, 38.897676\], \[-77.009051, 38.889939\]\] Write now I use this… --- ## [Kibana import API for deployment](https://discuss.elastic.co/t/kibana-import-api-for-deployment/152748)
**Author:** [@kenlarsen](https://discuss.elastic.co/u/kenlarsen)\ **Replies:** 7\ **Last updated:** [October 17, 2018, 10:42am UTC](https://discuss.elastic.co/t/kibana-import-api-for-deployment/152748 "2018-10-17T10:42:09Z")
Hi, I have been using ELK for a couple of weeks and have created a first solution, which I would like to distribute to promote ELK in my organisation. Looking through the discussions I haven't found a way to successfull… --- ## [FilebeatとLogstashのログ転送再開方法について](https://discuss.elastic.co/t/filebeat-logstash/205362)
**Author:** [@Yamda.Yutaka](https://discuss.elastic.co/u/Yamda.Yutaka)\ **Replies:** 1\ **Last updated:** [November 6, 2019, 12:32pm UTC](https://discuss.elastic.co/t/filebeat-logstash/205362 "2019-11-06T12:32:06Z")
＜構成＞ filebeatを利用して複数台からログ収集しています。 filebeat×約10台 =\> logstash =\> elasticsearch logstash 6.4.2 filebeat 6.4.2 ＜事象＞ filebeat導入サーバで大量ログ出力後に、logstashログ収集が停止しました。 ※大量ログ出力したサーバ以外からのログもlogstash側への取込みが停止 ＜現在までの対応＞ filebea… --- ## [How Can I convert raw query with “aggs” to Nest query?](https://discuss.elastic.co/t/how-can-i-convert-raw-query-with-aggs-to-nest-query/105803)
**Author:** [@Nehad\_Hazem](https://discuss.elastic.co/u/Nehad_Hazem)\ **Replies:** 1\ **Last updated:** [November 5, 2017, 11:11pm UTC](https://discuss.elastic.co/t/how-can-i-convert-raw-query-with-aggs-to-nest-query/105803 "2017-11-05T23:11:26Z")
I have this raw query that is being used in Kibana to get and show some data from ElasticSearch. { "query": { "bool": { "must": \[ { "query\_string": { "query": "", "analyze\_wildcard": true } }, { "match": { "… --- ## [A fatal error has been detected by the Java Runtime Environment](https://discuss.elastic.co/t/a-fatal-error-has-been-detected-by-the-java-runtime-environment/14443)
**Author:** [@abdo](https://discuss.elastic.co/u/abdo)\ **Replies:** 1\ **Last updated:** [November 18, 2013, 8:17am UTC](https://discuss.elastic.co/t/a-fatal-error-has-been-detected-by-the-java-runtime-environment/14443 "2013-11-18T08:17:19Z")
Hi all Sorry if this issue has been discussed before. I ran into this issue several time and found some people suggesting to increase the swap (I run ES on ubuntu linux) but this didn't help. attached is the dump fi… --- ## [Transform has failed; experienced: \[task encountered irrecoverable failure: field name cannot be null.\]](https://discuss.elastic.co/t/transform-has-failed-experienced-task-encountered-irrecoverable-failure-field-name-cannot-be-null/234780)
**Author:** [@simonlucalandi](https://discuss.elastic.co/u/simonlucalandi)\ **Replies:** 3\ **Last updated:** [May 29, 2020, 7:24am UTC](https://discuss.elastic.co/t/transform-has-failed-experienced-task-encountered-irrecoverable-failure-field-name-cannot-be-null/234780 "2020-05-29T07:24:39Z")
Hi all. I created a transform on ES 7.7.0 from Kibana gui, that uses some group\_by with script to handle any missing fields in the docs: "pivot": { "group\_by": { "acquisition.utm\_campaign.keyword": {… --- ## [Standard tokenizer punctuation symbols removed](https://discuss.elastic.co/t/standard-tokenizer-punctuation-symbols-removed/223426)
**Author:** [@Chris\_Gatihi](https://discuss.elastic.co/u/Chris_Gatihi)\ **Replies:** 3\ **Last updated:** [March 13, 2020, 3:38pm UTC](https://discuss.elastic.co/t/standard-tokenizer-punctuation-symbols-removed/223426 "2020-03-13T15:38:30Z")
The ES documentation here \[0\] states this about the standard tokenizer: The standard tokenizer divides text into terms on word boundaries, as defined by the Unicode Text Segmentation algorithm. It removes most punctu… --- ## [Securing Elasticsearch and Kibana with SSL and username and password](https://discuss.elastic.co/t/securing-elasticsearch-and-kibana-with-ssl-and-username-and-password/184873)
**Author:** [@jkara](https://discuss.elastic.co/u/jkara)\ **Replies:** 3\ **Last updated:** [June 12, 2019, 8:47am UTC](https://discuss.elastic.co/t/securing-elasticsearch-and-kibana-with-ssl-and-username-and-password/184873 "2019-06-12T08:47:38Z")
Good evening to all, I have installed Elasticsearch and Kibana on a Centos 7 Virtual Machine. I have successfully enabled SSL encryption (HTTPS) but although I would also like to enable access to the Kibana GUI only t… --- ## [Kibana 5 X pack Segmentation fault](https://discuss.elastic.co/t/kibana-5-x-pack-segmentation-fault/65128)
**Author:** [@manojvenkat](https://discuss.elastic.co/u/manojvenkat)\ **Replies:** 3\ **Last updated:** [November 9, 2016, 12:01am UTC](https://discuss.elastic.co/t/kibana-5-x-pack-segmentation-fault/65128 "2016-11-09T00:01:51Z")
Hi, I have installed ELK 5 and started Elasticsearch and Kibana. I could able to view Kibana dashboard. Next I stopped both and Installed X pack with below command: bin/elasticsearch-plugin install file:///tmp/x-pac… --- ## [How to Alert When Elastic Agent Goes Offline?](https://discuss.elastic.co/t/how-to-alert-when-elastic-agent-goes-offline/379222)
**Author:** [@bakhtiyar](https://discuss.elastic.co/u/bakhtiyar)\ **Replies:** 7\ **Last updated:** [June 19, 2025, 1:22pm UTC](https://discuss.elastic.co/t/how-to-alert-when-elastic-agent-goes-offline/379222 "2025-06-19T13:22:58Z")
Hi everyone, I'm using Elastic Agent with Fleet and I can see the agent status (e.g., healthy, offline) from the Fleet → Agents UI in Kibana. Now, I want to create an alert that triggers when an agent goes offline for … --- ## [My field is doc\_value , but got error : Fielddata is disabled on text fields by default. Set fielddata=true](https://discuss.elastic.co/t/my-field-is-doc-value-but-got-error-fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true/66187)
**Author:** [@small-tomorrow](https://discuss.elastic.co/u/small-tomorrow)\ **Replies:** 1\ **Last updated:** [November 16, 2016, 4:02am UTC](https://discuss.elastic.co/t/my-field-is-doc-value-but-got-error-fielddata-is-disabled-on-text-fields-by-default-set-fielddata-true/66187 "2016-11-16T04:02:50Z")
I got ' Fielddata is disabled on text fields by default. Set fielddata=true' in my request , but it confused me ,since I put not\_analyzed to my field , so it is not a text field , which will support doc\_values according… --- ## [Strange heartbeat errors](https://discuss.elastic.co/t/strange-heartbeat-errors/134351)
**Author:** [@phil.zac](https://discuss.elastic.co/u/phil.zac)\ **Replies:** 6\ **Last updated:** [June 5, 2018, 4:10pm UTC](https://discuss.elastic.co/t/strange-heartbeat-errors/134351 "2018-06-05T16:10:55Z")
Hi, I am using ELK 6.2.2 with all Beats. When I use single node and run heartbeat, it does not come with any errors.. But when I run heartbeats with cluster, I am seeing long list of logs and the heartbeats stops. N… --- ## [CompositeAgg Histograms - fill empty interval gaps like normal histogramAggregation](https://discuss.elastic.co/t/compositeagg-histograms-fill-empty-interval-gaps-like-normal-histogramaggregation/180296)
**Author:** [@stogo](https://discuss.elastic.co/u/stogo)\ **Replies:** 0\ **Last updated:** [May 9, 2019, 7:02am UTC](https://discuss.elastic.co/t/compositeagg-histograms-fill-empty-interval-gaps-like-normal-histogramaggregation/180296 "2019-05-09T07:02:20Z")
Hi, I think it's a bug that CompositeAggregation histograms does not have a way to "fill empty interval buckets". It is the default behaviour in normal Histogram Aggregations. The documentation says in: Histogram Aggre… --- ## [Adding second Y-axis to stacked bar graph](https://discuss.elastic.co/t/adding-second-y-axis-to-stacked-bar-graph/236119)
**Author:** [@Rgvr\_S](https://discuss.elastic.co/u/Rgvr_S)\ **Replies:** 8\ **Last updated:** [June 17, 2020, 7:52am UTC](https://discuss.elastic.co/t/adding-second-y-axis-to-stacked-bar-graph/236119 "2020-06-17T07:52:58Z")
I have a stacked bar graph made for the following data, The bar graph looks like this, I'd like to add another Y-axis to divide the graph based on months. How do I do this ? I use elasticsearch7.3.2 and kibana7.3… --- ## [Using spring-elasticsearch to configure es vs custom spring factory beans](https://discuss.elastic.co/t/using-spring-elasticsearch-to-configure-es-vs-custom-spring-factory-beans/13914)
**Author:** [@mfriedma](https://discuss.elastic.co/u/mfriedma)\ **Replies:** 8\ **Last updated:** [October 15, 2013, 5:54pm UTC](https://discuss.elastic.co/t/using-spring-elasticsearch-to-configure-es-vs-custom-spring-factory-beans/13914 "2013-10-15T17:54:33Z")
Hi, I'm evaluating using https://github.com/dadoonet/spring-elasticsearch - it looks quite good. Earlier I had created a custom spring factory bean to configure a very simple es transport client. I did not set … --- ## [OpenTelemetry metrics are not properly shown on Kibana](https://discuss.elastic.co/t/opentelemetry-metrics-are-not-properly-shown-on-kibana/325478)
**Author:** [@nicolas.orbes](https://discuss.elastic.co/u/nicolas.orbes)\ **Replies:** 2\ **Last updated:** [February 14, 2023, 2:46pm UTC](https://discuss.elastic.co/t/opentelemetry-metrics-are-not-properly-shown-on-kibana/325478 "2023-02-14T14:46:43Z")
Kibana version: 8.6.1 Elasticsearch version: 8.6.1 APM Server version: 8.6.1 OpenTelementry Java Agent: 1.22.1 Original install method (e.g. download page, yum, deb, from source, etc.) and version: We used the docke… --- ## [How to debug elasticsearch logstash ingestion pipelines](https://discuss.elastic.co/t/how-to-debug-elasticsearch-logstash-ingestion-pipelines/237618)
**Author:** [@genehunter29009](https://discuss.elastic.co/u/genehunter29009)\ **Replies:** 1\ **Last updated:** [June 22, 2020, 10:28am UTC](https://discuss.elastic.co/t/how-to-debug-elasticsearch-logstash-ingestion-pipelines/237618 "2020-06-22T10:28:57Z")
Trying to use the pipelines in a beats config on logstash. The issue is its not seeing the pipeline so the data is going straight into the index unprocessed. I am sure something is wrong with the code that builds the pip… --- ## [Parsing URL with Logstash (using ECS fields)](https://discuss.elastic.co/t/parsing-url-with-logstash-using-ecs-fields/205814)
**Author:** [@Vincent\_Maury](https://discuss.elastic.co/u/Vincent_Maury)\ **Replies:** 1\ **Last updated:** [October 31, 2019, 11:57am UTC](https://discuss.elastic.co/t/parsing-url-with-logstash-using-ecs-fields/205814 "2019-10-31T11:57:49Z")
Hi there i've been working on a way to parse url into ecs fields, and it seems to be working well. Hope it helps! # Parser a url filter { grok { match =\> \[ # match https://user:pwd@stuff.domain… --- ## [How does the "jaeger client" data access "APM" via "OpenTelemetry"?](https://discuss.elastic.co/t/how-does-the-jaeger-client-data-access-apm-via-opentelemetry/278375)
**Author:** [@tttoad](https://discuss.elastic.co/u/tttoad)\ **Replies:** 2\ **Last updated:** [July 15, 2021, 6:47am UTC](https://discuss.elastic.co/t/how-does-the-jaeger-client-data-access-apm-via-opentelemetry/278375 "2021-07-15T06:47:37Z")
APM Server version 7.13.2 elasticSearch: 7.13.2 kibana: 7.13.2 Questions: 1.The error rate module in the Overview screen shows "No data to display", and the "Error rate" in the Transactions screen is N/A. How do I set … --- ## [Search and delete indexes older than 1 month](https://discuss.elastic.co/t/search-and-delete-indexes-older-than-1-month/224853)
**Author:** [@Hamza\_Y](https://discuss.elastic.co/u/Hamza_Y)\ **Replies:** 2\ **Last updated:** [March 25, 2020, 7:12am UTC](https://discuss.elastic.co/t/search-and-delete-indexes-older-than-1-month/224853 "2020-03-25T07:12:27Z")
In Kibana when i GET \_cat/indices?v i get the following results: health status index uuid pri rep docs.count docs.deleted store.size pri.store.size yellow open timeline-2018.05 … --- ## [Changing decimal accuracy in Color scripted field](https://discuss.elastic.co/t/changing-decimal-accuracy-in-color-scripted-field/76537)
**Author:** [@Oferkes](https://discuss.elastic.co/u/Oferkes)\ **Replies:** 2\ **Last updated:** [March 6, 2017, 7:25pm UTC](https://discuss.elastic.co/t/changing-decimal-accuracy-in-color-scripted-field/76537 "2017-03-06T19:25:04Z")
Hi, is there a way to control the accuracy of a Color scripted field, for example: i am intersted in showing up to 3 digits after the decimal point. The script for that Color scripted field is: doc\['latency'\].value… --- ## [Virtual memory usage of elasticsearch](https://discuss.elastic.co/t/virtual-memory-usage-of-elasticsearch/19357)
**Author:** [@Gokul\_nath](https://discuss.elastic.co/u/Gokul_nath)\ **Replies:** 2\ **Last updated:** [August 21, 2014, 10:03am UTC](https://discuss.elastic.co/t/virtual-memory-usage-of-elasticsearch/19357 "2014-08-21T10:03:43Z")
Hi, when i see top command virtual memory usage for ElasticSearch is high. I have allocated min 1G and max 2G heap size for it. How can i control the virtual memory usage? I am getting OOM frequently on ElasticSea… --- ## [Watcher does not accept my Mail](https://discuss.elastic.co/t/watcher-does-not-accept-my-mail/174143)
**Author:** [@kainico](https://discuss.elastic.co/u/kainico)\ **Replies:** 1\ **Last updated:** [March 27, 2019, 6:35pm UTC](https://discuss.elastic.co/t/watcher-does-not-accept-my-mail/174143 "2019-03-27T18:35:32Z")
Hi all, I discoverd an issue where elastic is not sending alerts to my Email Adress. I have tested this with multiple alerts that work just fine with other Mails. Alerts are not even sending Mails to different Mail Ac… --- ## [High Cpu usage in elasticsearch nodes](https://discuss.elastic.co/t/high-cpu-usage-in-elasticsearch-nodes/161504)
**Author:** [@sukku77](https://discuss.elastic.co/u/sukku77)\ **Replies:** 4\ **Last updated:** [January 9, 2019, 6:27am UTC](https://discuss.elastic.co/t/high-cpu-usage-in-elasticsearch-nodes/161504 "2019-01-09T06:27:16Z")
Hi , I am using ELK 6.4.0. ES cluster nodes are using high cpu usage with out much load. I observed garbage collection pauses in logs. ES configurations: 1. 5 node cluster 2. 8 core and 32gb 3. Shards 5 per index I… --- ## [Agent support for OS windows server and red hat](https://discuss.elastic.co/t/agent-support-for-os-windows-server-and-red-hat/262276)
**Author:** [@javig12](https://discuss.elastic.co/u/javig12)\ **Replies:** 3\ **Last updated:** [February 22, 2021, 3:59am UTC](https://discuss.elastic.co/t/agent-support-for-os-windows-server-and-red-hat/262276 "2021-02-22T03:59:54Z")
Hello Community, what about support agents on these servers: Windows Server 2012 R2, Windows Server 2012, Windows Server 2008 R2, Linux Redhat desde 5.11 and 6.8 hope your comments, Regards. --- ## [Ilm-history-2-000001 UNASSIGNED, primary shard for this replica is not yet active](https://discuss.elastic.co/t/ilm-history-2-000001-unassigned-primary-shard-for-this-replica-is-not-yet-active/246978)
**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\ **Replies:** 3\ **Last updated:** [August 31, 2020, 9:44pm UTC](https://discuss.elastic.co/t/ilm-history-2-000001-unassigned-primary-shard-for-this-replica-is-not-yet-active/246978 "2020-08-31T21:44:17Z")
Please I need critical help with cluster in state RED after upgrade 7.4.2-\>7.9 during upgrade of 5th node of 15 it did not recover it health to 100% but 99% all indices are green except 2 shards index … --- ## [Beats in docker: logging so filebeat picks up logs via "docker logs" API](https://discuss.elastic.co/t/beats-in-docker-logging-so-filebeat-picks-up-logs-via-docker-logs-api/205869)
**Author:** [@sgreszcz](https://discuss.elastic.co/u/sgreszcz)\ **Replies:** 3\ **Last updated:** [November 13, 2019, 3:07pm UTC](https://discuss.elastic.co/t/beats-in-docker-logging-so-filebeat-picks-up-logs-via-docker-logs-api/205869 "2019-11-13T15:07:57Z")
I'm running several containers in docker and using filebeat and metricbeat to poll the Docker APIs to get metrics and logfiles. However I can't see any of the filebeat or metricbeat logs (also running in containers) usi… --- ## [No xpack monitoring for metricbeat](https://discuss.elastic.co/t/no-xpack-monitoring-for-metricbeat/136573)
**Author:** [@Badger](https://discuss.elastic.co/u/Badger)\ **Replies:** 3\ **Last updated:** [June 21, 2018, 9:53pm UTC](https://discuss.elastic.co/t/no-xpack-monitoring-for-metricbeat/136573 "2018-06-21T21:53:49Z")
I have enabled xpack monitoring in 6.3.0 in filebeat, auditbeat, and metricbeat. Security is disabled. filebeat and auditbeat show up just fine, metricbeat does not. metricbeat logs an error every 10 seconds 2018-06-19T… --- ## [Help with tomcat grok pattern](https://discuss.elastic.co/t/help-with-tomcat-grok-pattern/104551)
**Author:** [@sbampa](https://discuss.elastic.co/u/sbampa)\ **Replies:** 3\ **Last updated:** [October 19, 2017, 6:49pm UTC](https://discuss.elastic.co/t/help-with-tomcat-grok-pattern/104551 "2017-10-19T18:49:25Z")
Hi all, i have the following tomcat logs: 04-Oct-2017 14:27:51.457 INFO \[main\] org.apache.catalina.startup.VersionLoggerListener.log Server number: 8.5.8.0 04-Oct-2017 14:27:51.457 INFO \[main\] org.apache.catalina.star… --- ## [Elasticsearch docs GET vs POST question](https://discuss.elastic.co/t/elasticsearch-docs-get-vs-post-question/110176)
**Author:** [@arisbanach](https://discuss.elastic.co/u/arisbanach)\ **Replies:** 0\ **Last updated:** [December 4, 2017, 4:20pm UTC](https://discuss.elastic.co/t/elasticsearch-docs-get-vs-post-question/110176 "2017-12-04T16:20:21Z")
This docs page says The difference here is that instead of passing q=\* in the URI, we POST a JSON-style query request body to the \_search API. We’ll discuss this JSON query in the next section. below this example: G… --- ## [Which index is receiving data and where is that configured](https://discuss.elastic.co/t/which-index-is-receiving-data-and-where-is-that-configured/223483)
**Author:** [@Axl](https://discuss.elastic.co/u/Axl)\ **Replies:** 5\ **Last updated:** [March 13, 2020, 3:33pm UTC](https://discuss.elastic.co/t/which-index-is-receiving-data-and-where-is-that-configured/223483 "2020-03-13T15:33:54Z")
I am a newbie to ELK, and this is very probably a n00b question. I have set up ELK, and those are currently the indices that I have on my host: curl 'http://localhost:9200/\_cat/indices?v' health status index … --- ## [Elasticsearch 5.x goes to YELLOW state more frequently due to high GC activity](https://discuss.elastic.co/t/elasticsearch-5-x-goes-to-yellow-state-more-frequently-due-to-high-gc-activity/105339)
**Author:** [@bsarkar](https://discuss.elastic.co/u/bsarkar)\ **Replies:** 5\ **Last updated:** [November 24, 2017, 5:27pm UTC](https://discuss.elastic.co/t/elasticsearch-5-x-goes-to-yellow-state-more-frequently-due-to-high-gc-activity/105339 "2017-11-24T17:27:05Z")
We recently moved from ES 2.x to ES 5.4.1 and are seeing an increased GC activity on the data nodes. We're seeing frequent young GC happening and each cycle taking just less than a second. Due to lots of GC, data nodes a… --- ## [Starting up InternalTestCluster outside of ESIntegTestCase](https://discuss.elastic.co/t/starting-up-internaltestcluster-outside-of-esintegtestcase/65366)
**Author:** [@Shai\_Erera](https://discuss.elastic.co/u/Shai_Erera)\ **Replies:** 5\ **Last updated:** [December 7, 2016, 3:25pm UTC](https://discuss.elastic.co/t/starting-up-internaltestcluster-outside-of-esintegtestcase/65366 "2016-12-07T15:25:50Z")
Hi, I want to write an integration test against and embedded ES test cluster. I read about ESIntegTestCase and managed to successfully implement a FooTest extends ESIntegTestCase. Cluster started (as expected), and I w… --- ## [Reading Data from Elastic Search and write into file using java Program](https://discuss.elastic.co/t/reading-data-from-elastic-search-and-write-into-file-using-java-program/8189)
**Author:** [@Sumit\_Guptaa](https://discuss.elastic.co/u/Sumit_Guptaa)\ **Replies:** 5\ **Last updated:** [June 22, 2012, 9:43am UTC](https://discuss.elastic.co/t/reading-data-from-elastic-search-and-write-into-file-using-java-program/8189 "2012-06-22T09:43:49Z")
hi all can anybody give me how we can connect to elastic search using java program and read the data from elastic search and write the content into files... Regards, Sumit Gupta --- ## [High Availability of my elastic cluster](https://discuss.elastic.co/t/high-availability-of-my-elastic-cluster/164933)
**Author:** [@pme](https://discuss.elastic.co/u/pme)\ **Replies:** 7\ **Last updated:** [February 13, 2019, 3:09pm UTC](https://discuss.elastic.co/t/high-availability-of-my-elastic-cluster/164933 "2019-02-13T15:09:52Z")
Hello, I have to maintain an elastic cluster composed of 8 data nodes on 4 virtual machines, 2 nodes per virtual machine. We have one index created every day, composed of 8 shards and 1 replica per shards. In this con… --- ## [Trendline with visual builder?](https://discuss.elastic.co/t/trendline-with-visual-builder/124808)
**Author:** [@michimau](https://discuss.elastic.co/u/michimau)\ **Replies:** 1\ **Last updated:** [March 20, 2018, 4:08pm UTC](https://discuss.elastic.co/t/trendline-with-visual-builder/124808 "2018-03-20T16:08:09Z")
Is there a way to compute a linear trend line with visual builder? example best! @michimau --- ## [How to get connected vpn users](https://discuss.elastic.co/t/how-to-get-connected-vpn-users/98039)
**Author:** [@schlum](https://discuss.elastic.co/u/schlum)\ **Replies:** 1\ **Last updated:** [August 23, 2017, 10:28am UTC](https://discuss.elastic.co/t/how-to-get-connected-vpn-users/98039 "2017-08-23T10:28:45Z")
Hi, I am new to ELK and cannot find the good way to do the following (neither the keywords to search the documentation…) : I have an index with my ASA VPN logs. When a user connect we get a “login” log and a “logout” … --- ## [Unable to add a new node](https://discuss.elastic.co/t/unable-to-add-a-new-node/94684)
**Author:** [@Gkmgaurav](https://discuss.elastic.co/u/Gkmgaurav)\ **Replies:** 7\ **Last updated:** [August 5, 2017, 10:45am UTC](https://discuss.elastic.co/t/unable-to-add-a-new-node/94684 "2017-08-05T10:45:56Z")
Hi friends, I am new to elastic search. It is possible someone might have asked this question previously. But, I am not able to find a proper solution. I had a 3 node cluster on AWS, with ver 1.5 . Out of the 3 nodes two… --- ## [Previously working groovy script fails](https://discuss.elastic.co/t/previously-working-groovy-script-fails/55110)
**Author:** [@Attila\_Nagy](https://discuss.elastic.co/u/Attila_Nagy)\ **Replies:** 7\ **Last updated:** [July 18, 2016, 12:32pm UTC](https://discuss.elastic.co/t/previously-working-groovy-script-fails/55110 "2016-07-18T12:32:47Z")
Running ES 2.3.3 on openjdk 8u92 with the following policy file (with -Djava.security.policy=java.policy): grant { permission org.elasticsearch.script.ClassPermission "\*"; }; produces this exception while I try to … --- ## [How to create a geo\_point in a scripted field](https://discuss.elastic.co/t/how-to-create-a-geo-point-in-a-scripted-field/2611)
**Author:** [@avramw](https://discuss.elastic.co/u/avramw)\ **Replies:** 1\ **Last updated:** [June 13, 2015, 9:11pm UTC](https://discuss.elastic.co/t/how-to-create-a-geo-point-in-a-scripted-field/2611 "2015-06-13T21:11:58Z")
Hello all, I have a field called lat and a field called long in my data. Is there away to create a Scripted Field in Kibana that is a geo\_point out of these two fields? Thanks! --- ## [Kibana hangs at creating index pattern forever](https://discuss.elastic.co/t/kibana-hangs-at-creating-index-pattern-forever/226404)
**Author:** [@LucasTT](https://discuss.elastic.co/u/LucasTT)\ **Replies:** 6\ **Last updated:** [April 7, 2020, 7:51am UTC](https://discuss.elastic.co/t/kibana-hangs-at-creating-index-pattern-forever/226404 "2020-04-07T07:51:29Z")
Hi, I received the following error when trying to create an index pattern in Kibana. Kibana just keep showing "creating index pattern..." forever. Does anyone know how to fix it? Kibana settings: ".kibana\_1" : {… --- ## [Snapshot & restore](https://discuss.elastic.co/t/snapshot-restore/106206)
**Author:** [@Damien](https://discuss.elastic.co/u/Damien)\ **Replies:** 6\ **Last updated:** [November 6, 2017, 8:57am UTC](https://discuss.elastic.co/t/snapshot-restore/106206 "2017-11-06T08:57:07Z")
Hi, I use snapshot & restore module for Elasticsearch 2.3 to backup our server every day. We rotate every 7 backup. The rotate works, i can verify with this command: curl -XGET 'localhost:9200/\_snapshot/my\_backup/\_al… --- ## [How to use twitter plugin in Logstash 5.x](https://discuss.elastic.co/t/how-to-use-twitter-plugin-in-logstash-5-x/70176)
**Author:** [@RainTown](https://discuss.elastic.co/u/RainTown)\ **Replies:** 6\ **Last updated:** [February 6, 2017, 5:17am UTC](https://discuss.elastic.co/t/how-to-use-twitter-plugin-in-logstash-5-x/70176 "2017-02-06T05:17:22Z")
Hi I want to pull tweets matching particular keywords into ELK, adding a field to show what was matched. I can do this, but solution does not scale and I think there is likely a better way. Here's my conf files, I t… [Previous page](https://discuss.elastic.co/top.md?page=1045&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1047&per_page=50&period=all)