hello When I start the elasticsearch 6.6.0，everything is ok，but after 10 minutes passed，elasticsearch throw the java.nio.file.NoSuchFileException: /home/wsn/es6.6/es\_data/node\_2/data/nodes/0/node.lock and most of shared…
---
## [Search for only numbers match](https://discuss.elastic.co/t/search-for-only-numbers-match/106392)
Hi, I want to search for id with numbers only in Kibana discovery tab. I came up with below query but it's not returning hits as desired. I pasted the sample message also which is expected output. Thanks in advance. Que…
---
## [Beat.name change in Filebeat 5.4](https://discuss.elastic.co/t/beat-name-change-in-filebeat-5-4/91587)
Hi I have installed Filebeat 5.4 on ubuntu server and where multiple logs like web.log, email.log available, need to forward to logstash server (ELK) to see in kibana. Here my filebeat.yml file as below filebeat.pro…
---
## [Calculating variance using kibana](https://discuss.elastic.co/t/calculating-variance-using-kibana/59831)
Want to calculate variance for a time series data of multiple restaurants with number of customers visiting every day. date name numCustomers 1-Sep-2016 restaurant1 40 2-Sep-2016 restaurant1 30 3-Sep-2…
---
## [Production cluster slows down after 15-20 days of starting the services](https://discuss.elastic.co/t/production-cluster-slows-down-after-15-20-days-of-starting-the-services/49070)
We are using 5 machines cluster in production for ElasticSearch. We are facing an issue that initially cluster response is good but after 15-20 days of starting the services, ES response get slow down, also indexing p…
---
## [Search time field extraction](https://discuss.elastic.co/t/search-time-field-extraction/15982)
I am a newbie to ES/Kibana/logstash and still getting my feet wet. I could be missing something obvious but I haven't come across a way so far to extract a field at search time i.e., without setting up a grok{}/grep{}…
---
## [Kibana Discover not showing the quick visualize option for the fields in Kibana 7.8.0](https://discuss.elastic.co/t/kibana-discover-not-showing-the-quick-visualize-option-for-the-fields-in-kibana-7-8-0/242804)
I've installed ELK Stack 7.8.0 using docker with basic license enabled and TLS between the ES nodes. Passwords has been created for the built in users and configured. Everything works fine. But in Kibana in the discover…
---
## [How do you get Hit counts from elasticsearch](https://discuss.elastic.co/t/how-do-you-get-hit-counts-from-elasticsearch/199160)
i need hit count of every 15 minutes interval for last 7 days. I do know there is curl api to get hit counts and you have to specify start and end time but using that methods i will have to make one request per 15 min in…
---
## [Multi line CSV Log](https://discuss.elastic.co/t/multi-line-csv-log/124174)
We have a CSV log and the very last element contains a multi line message. Only the first line appears in Elastic. input { beats { port =\> 5044 } stdin { codec =\> multiline { pattern =\> "\\n" what =\> "previous" } …
---
## [Visualize: no \[query\] registered for \[query\]](https://discuss.elastic.co/t/visualize-no-query-registered-for-query/117262)
I'm trying to follow Setting Up Field and Document Level Security | X-Pack for the Elastic Stack \[6.0\] | Elastic and running into a bit of the issue there... I logged into Kibana, generated a filter that I'd like to app…
---
## [Call custom ES api from inside plugin](https://discuss.elastic.co/t/call-custom-es-api-from-inside-plugin/105477)
Hi all, my need is to call a custom api like /elasticsearchip:port/path/to/api and pass two parameter in query string like ?parm1=value¶m2=value. Which is the best and clean solution? I’m trying to make a server.rou…
---
## [Filebeat perf benchmark numbers](https://discuss.elastic.co/t/filebeat-perf-benchmark-numbers/93247)
I am looking for Filebeat performance benchmark numbers and how it compares other shippers like FluentD. Any pointers would help.
---
## [Plugin \[lang-mustache\] must be at least a jvm or site plugin](https://discuss.elastic.co/t/plugin-lang-mustache-must-be-at-least-a-jvm-or-site-plugin/66979)
Hi I'm trying to use spring to write/search elasticsearch. Im running Elastic 5.0.1, with spring-data-elasticsearch 2.0.5. I've configured spring as follows: @EnableElasticsearchRepositories(basePackages = "my/pack…
---
## ["Failed to load logging configuration" when running ES script](https://discuss.elastic.co/t/failed-to-load-logging-configuration-when-running-es-script/58975)
Any time I try to call the Elasticsearch script (like to change my node name) I get the following error: Exception in thread "main" ElasticsearchException(Failed to load logging configuration\]; nested: NoSuchFileExcept…
---
## [ElasticSearch cluster allocation fails - disk threshold not met](https://discuss.elastic.co/t/elasticsearch-cluster-allocation-fails-disk-threshold-not-met/50860)
Hello community I have ES1.6 cluster on Centos 6 and 7 combined, 4 node cluster at this moment. "cluster\_name" : "nolo-elasticsearch", "status" : "red", "timed\_out" : false, "number\_of\_nodes" : 4, "number\_…
---
## [Should I use query\_string in production?](https://discuss.elastic.co/t/should-i-use-query-string-in-production/48718)
I want to enable search on my website. Features would be full-text, field-based, wildcard-based, supporting AND/OR/NOT, etc. Using the Elastic Search DSL to implement these features is doable. However, I will need to p…
---
## [Kibana Visualizations - Data Table](https://discuss.elastic.co/t/kibana-visualizations-data-table/41913)
I am very new to ELK and am probably jumping into the deep end but I have setup an elk server to take in the logs from our firewall. It is doing just that without issue (using netflow and syslog for now). My problem is…
---
## [How can i change the score](https://discuss.elastic.co/t/how-can-i-change-the-score/39048)
this is my input text. and the result.. this is not what i want! i think the 'last ' should in first ， how can i change the score this is the tf-idf "hits" : { "total" : 4353, "max\_score" : 2.576459, "hits" : …
---
## [Fleet data exporting to CSV](https://discuss.elastic.co/t/fleet-data-exporting-to-csv/318848)
Hi, Is there way i can export Fleet data to CSV. I mean do we have a index for fleet for writing queries ?? my use case is i need to build a dashboard where it should show status of Elastic agent in each VM and way to …
---
## [Why do I get a variable this binding exception after upgrading to Logstash 2.2?](https://discuss.elastic.co/t/why-do-i-get-a-variable-this-binding-exception-after-upgrading-to-logstash-2-2/50875)
I make use of sql\_last\_start in my SQL statement, but after upgrading (or downgrading) Logstash, I get an exception. statement =\> "SELECT \* FROM myTable where myDate \> :sql\_last\_value" {:timestamp=\>"2016-05-18T17:21…
---
## [Aggregations for charting on 500 billion documents](https://discuss.elastic.co/t/aggregations-for-charting-on-500-billion-documents/79197)
Hello, I'm working on a use case where I need to perform aggregations for charting on a 500 billion documents. The data is related to some sales. I have evaluated the data size as 8 mb for 24000 documents on my lo…
---
## [Filebeat creates wrong index name](https://discuss.elastic.co/t/filebeat-creates-wrong-index-name/212456)
I'm using filebeat and elasticsearch 7.5.0, installed via Elastic's helm charts. I'm trying to get ES and Filebeat set up in such a way that I can stand up a new cluster inside kubernetes and have everything Just Work. …
---
## [Full log trace](https://discuss.elastic.co/t/full-log-trace/99947)
Hi Team, How can I get full log trace in the message when I search for some syntax? FYR. \[image\] Thanks in advance, Siva
---
## [Visualizing data with no indexing](https://discuss.elastic.co/t/visualizing-data-with-no-indexing/61122)
Hi All, I originally posted a thread in the ElasticSearch forum (https://discuss.elastic.co/t/pulling-values-for-properties-that-have-index-set-to-no/61106), ultimately the question now comes over to the Kibana side. …
---
## [Create Pie Chart for Agg of 2 fields](https://discuss.elastic.co/t/create-pie-chart-for-agg-of-2-fields/50710)
Hi , My index contain the following fields: rb\_commit git\_commit I want my Pie chart will contain the sum of each one of the fields , that means the pie chart will be separate for 2 parts (to the sum of rb\_commits a…
---
## [Advantages of embedded node client in Spring data elasticsearch](https://discuss.elastic.co/t/advantages-of-embedded-node-client-in-spring-data-elasticsearch/45442)
We are using spring data elasticsearch in our application. Our application will be hosted as in premise for each user. So we have an issue to host individual elastic search server for each user. Could you please let us k…
---
## [Marvel agent not sending to Marvel monitoring cluster](https://discuss.elastic.co/t/marvel-agent-not-sending-to-marvel-monitoring-cluster/39016)
Hi all, First time around trying to setup an external Marvel cluster for monitoring several other clusters. I have setup a 3-nodes Marvel cluster based on the latest version, ES 2.1.1, Kibana 4.3.1, Marvel 2.1.1. The…
---
## [Logstash 2.0.0 SSLError: Socket closed](https://discuss.elastic.co/t/logstash-2-0-0-sslerror-socket-closed/33748)
I am receiving an SSL socket error when using the new Logstash 2.0.0. My configuration: NXLog conf: \ Module im\_tcp Host 0.0.0.0 Port 1514 Exec …
---
## [CorruptIndexException when trying to replicate one shard of a new index](https://discuss.elastic.co/t/corruptindexexception-when-trying-to-replicate-one-shard-of-a-new-index/20387)
Created and populated a new index on a 1.3.1 cluster. Primary shards work fine. Updated the index to create several replicas, and three of the four shards replicated, but one shard fails to replicate on any node with…
---
## [Query nested array for empty and specific value](https://discuss.elastic.co/t/query-nested-array-for-empty-and-specific-value/316263)
try to push windows EventLog into logstash and get pereodicaly .. \`\<=' for nil:NilClass\>, Woindows 2008r2 w/Cyrilic locale input { # get events from NxLog via tcp+json tcp { type =\> "EventLog" co…
---
## [Logstash pipeline error when processing a csv file](https://discuss.elastic.co/t/logstash-pipeline-error-when-processing-a-csv-file/329612)
Hello I am getting the below error when running the pipeline logstash conf file. Kindly let me know way to overcome this error student@elk:/$ sudo /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/csv-read-3.co…
---
## [Building Pie chart in kibana](https://discuss.elastic.co/t/building-pie-chart-in-kibana/290150)
Hi, I have tried build pie chart on field such as "STAT" and "Sender\_", but some logs contain only the "STAT" field and some logs contain "Sender\_id". I tried building viz on two parameters but it's not working through …
---
## [Add "time" chart on kibana](https://discuss.elastic.co/t/add-time-chart-on-kibana/287271)
hi all, i want adding time chart like the screenshot. kibana only show the "document" field ony. i've add the index pattern and it doesn't work. any help please! my kibana currently
---
## [Has anyone implemented APM Server in high availability?](https://discuss.elastic.co/t/has-anyone-implemented-apm-server-in-high-availability/242894)
The idea is to deploy 2 APM server(Primary and secondary), one Elastic cluster for output, and the agents will send the events to one of those APM server. Not sure if i need to put a proxy/load balancer and where?. (tra…
---
## [Elasticsearch 7.1 Installation issues](https://discuss.elastic.co/t/elasticsearch-7-1-installation-issues/183714)
Hi I Installed install java-1.8.0-openjdk java-1.8.0-openjdk-devel and installed Elasticsearch 7.1 when I start elasticsearch with default configuration I mean elasticsearch.yml and jvm.options I can verify elasticsearc…
---
## [Multiple Re-order for chart](https://discuss.elastic.co/t/multiple-re-order-for-chart/160383)
Hi all, I'm trying to create a chart visualization which displays information from five events ordered by an ID. The problem is that I am not able to see the lastest values when the aggregation size is less than the to…
---
## [Out of memory of data nodes](https://discuss.elastic.co/t/out-of-memory-of-data-nodes/117169)
Hi, I have cluster with 5 nodes: 3 master and 2 data nodes. Data nodes have 24 Gb heap, 12Gb Xmx. I use daily indexes which automatically created at midnight. Each index is about 30Gb. Index has 5 shards and 1 replic…
---
## [Does Elasticsearch go to sleep when there are no requests for a couple of hours?](https://discuss.elastic.co/t/does-elasticsearch-go-to-sleep-when-there-are-no-requests-for-a-couple-of-hours/231632)
My development sever is a windows machine, and I leave Elasticsearch running at the end of the day... I have noticed that, every time I start working the next day, the first search request from Elasticsearch does not ret…
---
## [Logstash handling of field names with all caps](https://discuss.elastic.co/t/logstash-handling-of-field-names-with-all-caps/97017)
Logstash version is 5.4.3. I have been attempting to perform a grok on a field, however no matter what I do, the grok never occurs (it is wrapped in an if statement). My field name is “EVENT\_CLICK” and no matter what I…
---
## [\[Metricbeat Docker\] Overview ECS is showing no data and error: \[esaggs\] \> "field" is a required parameter](https://discuss.elastic.co/t/metricbeat-docker-overview-ecs-is-showing-no-data-and-error-esaggs-field-is-a-required-parameter/206540)
Hello, I am using Metricbeat in docker to monitor my systems Metrics as well as my docker metrics. Unfortunately, i get an error in Kibana showing this: My metricbeat config looks like this: metricbeat.autodisco…
---
## [Logstash to Elasticsearch connectivity issue after configuring SSL](https://discuss.elastic.co/t/logstash-to-elasticsearch-connectivity-issue-after-configuring-ssl/172969)
As a part of enabling encryption on services, I tried the following tasks. Enable SSL on ElasticSearch Enable SSL on Kibana Enable SSL for the communication channel between Kibana and Elasticsearch. Above things were …
---
## [Assign Dashboard to Space](https://discuss.elastic.co/t/assign-dashboard-to-space/158283)
ELK 6.5 Windows How does one assign Dashboards to Spaces? If it's there it's well hidden... Also, the experimentel spaces API is returning only 404: GET /api/spaces/space { "error" : { "root\_cause" : \[ { …
---
## [Getting scripted fields](https://discuss.elastic.co/t/getting-scripted-fields/42101)
where they are stored? how i can get to them? want to save them in kind of import/export thanks
---
## [Unknown error in second elasticsearch node](https://discuss.elastic.co/t/unknown-error-in-second-elasticsearch-node/189474)
I am getting the following error when I start the second node, any ideas? Here is my settings for master and node 1: Master: bootstrap.memory\_lock: false cluster.name: panacea http.port: 9200-9220 node.data: true node…
---
## [Design advice for market data](https://discuss.elastic.co/t/design-advice-for-market-data/15546)
Wanting to get some advice on how to go about design. I have some currency market data and I get roughly 10 million events a week currently storing in postgres, it actually ends up being about 10 gigs, though I woul…
---
## [org.elasticsearch.ElasticsearchSecurityException: current license is non-compliant for \[security\]](https://discuss.elastic.co/t/org-elasticsearch-elasticsearchsecurityexception-current-license-is-non-compliant-for-security/138035)
My understanding is that with ES 6.3 Security x-pack is opensource and you can start using security x-pack with no license restriction. is that correct ? if so then i m getting following error \[2018-06-29T14:55:29,609\]\[…
---
## [Elasticsearch:Release disk space automatic or call the api?](https://discuss.elastic.co/t/elasticsearch-release-disk-space-automatic-or-call-the-api/53773)
The official document says: As already mentioned in Updating a Whole Document, deleting a document doesn’t immediately remove the document from disk; it just marks it as deleted. Elasticsearch will clean up deleted docum…
---
## [Elastic Cloud Enterprise 3.7.1 Security Update (ESA-2024-08)](https://discuss.elastic.co/t/elastic-cloud-enterprise-3-7-1-security-update-esa-2024-08/360888)
Elastic Cloud Enterprise - Uncontrolled Resource Consumption through HTTP/2 endpoints - CVE-2023-45288 (ESA-2024-08) On April 4, 2024, the Go Project announced CVE-2023-45288, which can lead to CPU exhaustion as an atta…
---
## [Threading and the Elasticsearch Context in Python](https://discuss.elastic.co/t/threading-and-the-elasticsearch-context-in-python/316561)
When I am programming to connect and use Elasticsearch in Python, is the Context thread safe? i.e. do I need one instance per thread or can I use a static Context for all threads?
[Previous page](https://discuss.elastic.co/top.md?page=1063&per_page=50&period=all)
[Next page](https://discuss.elastic.co/top.md?page=1065&per_page=50&period=all)