# Top **URL:** https://discuss.elastic.co/top.md?page=1068&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1069 --- ## [Unable to index a file in elasticsearch](https://discuss.elastic.co/t/unable-to-index-a-file-in-elasticsearch/102582)
**Author:** [@f1ccb489d33b33a0f12a](https://discuss.elastic.co/u/f1ccb489d33b33a0f12a)\ **Replies:** 5\ **Last updated:** [October 8, 2017, 9:55am UTC](https://discuss.elastic.co/t/unable-to-index-a-file-in-elasticsearch/102582 "2017-10-08T09:55:28Z")
i'm using elasticsearch 5.6.0 with logstash and filebeats. i'm trying to index my files by the pattern "filebeat-" and then the source file name. when i used a simple string like "hello" the file got indexed correctly.… --- ## [How can I raise debug level on tribe node?](https://discuss.elastic.co/t/how-can-i-raise-debug-level-on-tribe-node/45535)
**Author:** [@Dee](https://discuss.elastic.co/u/Dee)\ **Replies:** 5\ **Last updated:** [March 29, 2016, 3:36pm UTC](https://discuss.elastic.co/t/how-can-i-raise-debug-level-on-tribe-node/45535 "2016-03-29T15:36:11Z")
Hi, I'm facing some issues with my tribe node. Every X minutes it fails reaching \_nodes thus failing the entire kibana dashboard. I would like to debug the issue, see if its a memory issue/network. The problem is that ES… --- ## [Logstash-Output-Mongodb to Mongo 3.4](https://discuss.elastic.co/t/logstash-output-mongodb-to-mongo-3-4/109997)
**Author:** [@jshipley-zyston](https://discuss.elastic.co/u/jshipley-zyston)\ **Replies:** 1\ **Last updated:** [December 7, 2017, 8:03pm UTC](https://discuss.elastic.co/t/logstash-output-mongodb-to-mongo-3-4/109997 "2017-12-07T20:03:31Z")
I am attempting to use the MongoDB Logstash Output plugin to output some data to the online MongoDB 3.4 (Atlas). Every time Logstash tries to send the data to the MongoDB I receive the following error: \[2017-11-24T22:2… --- ## [ELK Compatibility with Debian 13](https://discuss.elastic.co/t/elk-compatibility-with-debian-13/380745)
**Author:** [@tammyt](https://discuss.elastic.co/u/tammyt)\ **Replies:** 2\ **Last updated:** [August 7, 2025, 10:39am UTC](https://discuss.elastic.co/t/elk-compatibility-with-debian-13/380745 "2025-08-07T10:39:02Z")
With the release of debian 13 on August 9 (Debian 13 Set to Launch on August 9), is it safe for me to update my servers to this latest version? or will I have compatibility issues between ELK 8.19 (Emphasis on Kibana, as… --- ## [ELK basic config](https://discuss.elastic.co/t/elk-basic-config/196411)
**Author:** [@NewmazN24](https://discuss.elastic.co/u/NewmazN24)\ **Replies:** 8\ **Last updated:** [August 26, 2019, 1:43pm UTC](https://discuss.elastic.co/t/elk-basic-config/196411 "2019-08-26T13:43:23Z")
Hey Guys, I am turning to this forum since I can't get to the bottom of it. I installed ELK Stack on CentOS7, however I do not seem to be able to make my configuration working with my network. I am trying to get Winlogb… --- ## [Analyzers and Content Length](https://discuss.elastic.co/t/analyzers-and-content-length/226254)
**Author:** [@mrbarret](https://discuss.elastic.co/u/mrbarret)\ **Replies:** 7\ **Last updated:** [April 9, 2020, 2:42pm UTC](https://discuss.elastic.co/t/analyzers-and-content-length/226254 "2020-04-09T14:42:54Z")
I have a wonderful little document and index that I use to ingest document. Unfortunately, a few of the documents have long fields and the ingest process fails for those documents. An example document that I have conta… --- ## [Getting recent searched result](https://discuss.elastic.co/t/getting-recent-searched-result/210482)
**Author:** [@afiq](https://discuss.elastic.co/u/afiq)\ **Replies:** 1\ **Last updated:** [December 4, 2019, 8:32am UTC](https://discuss.elastic.co/t/getting-recent-searched-result/210482 "2019-12-04T08:32:11Z")
Hi guys. I'm pretty new with elasticsearch. How do I write a query to get results of most recent searched documents and sorted. For example if I used to search that specific document, when I come back and search it agai… --- ## [Kibana will not load](https://discuss.elastic.co/t/kibana-will-not-load/203131)
**Author:** [@Joshua\_Reback](https://discuss.elastic.co/u/Joshua_Reback)\ **Replies:** 7\ **Last updated:** [October 14, 2019, 8:57pm UTC](https://discuss.elastic.co/t/kibana-will-not-load/203131 "2019-10-14T20:57:55Z")
Hi, I'm taking the "Understanding and Controlling Relevance" course remotely, and I cannot access kibana. When I click the kibana link shown on the page here: http://ec2-18-196-225-250.eu-central-1.compute.amazonaws.com/… --- ## [How to split and parse message properly with different plugins?](https://discuss.elastic.co/t/how-to-split-and-parse-message-properly-with-different-plugins/101453)
**Author:** [@sipelg](https://discuss.elastic.co/u/sipelg)\ **Replies:** 1\ **Last updated:** [September 22, 2017, 11:10am UTC](https://discuss.elastic.co/t/how-to-split-and-parse-message-properly-with-different-plugins/101453 "2017-09-22T11:10:04Z")
Hi, I've been cracking my head for some time now but i just can't get it right. Logstash version 5.5.2 The goal is simple: take first part of message, treat it as 'timestamp' \[ optional: drop/omit the first part, \], t… --- ## [Elastic Search nodes / servers with constant high CPU utilization in idle state](https://discuss.elastic.co/t/elastic-search-nodes-servers-with-constant-high-cpu-utilization-in-idle-state/18544)
**Author:** [@webish](https://discuss.elastic.co/u/webish)\ **Replies:** 7\ **Last updated:** [July 12, 2014, 4:51am UTC](https://discuss.elastic.co/t/elastic-search-nodes-servers-with-constant-high-cpu-utilization-in-idle-state/18544 "2014-07-12T04:51:44Z")
I'm seeing very high CPU utilization in an idle or close to idle state. I haven't seen it use less than 40% on each node over the course of days. I'm not certain how long it has been like this but could be weeks. … --- ## [Custom Score Query and Sort questions](https://discuss.elastic.co/t/custom-score-query-and-sort-questions/3416)
**Author:** [@John\_Chang](https://discuss.elastic.co/u/John_Chang)\ **Replies:** 1\ **Last updated:** [October 6, 2010, 8:18pm UTC](https://discuss.elastic.co/t/custom-score-query-and-sort-questions/3416 "2010-10-06T20:18:44Z")
My application needs to have returned hits ordered either by a text field or a date field. I've looked at the Custom Score Query doc (http://www.elasticsearch.com/docs/elasticsearch/rest\_api/query\_dsl/custom\_score\_query… --- ## [APM - new transaction created when lambda requests via aws application load balancer](https://discuss.elastic.co/t/apm-new-transaction-created-when-lambda-requests-via-aws-application-load-balancer/314397)
**Author:** [@mcmikeyy](https://discuss.elastic.co/u/mcmikeyy)\ **Replies:** 4\ **Last updated:** [September 23, 2022, 9:07am UTC](https://discuss.elastic.co/t/apm-new-transaction-created-when-lambda-requests-via-aws-application-load-balancer/314397 "2022-09-23T09:07:46Z")
A lambda nodejs app has apm package "elastic-apm-node": "3.38.0" layer extension: layer:elastic-apm-extension-ver-1-1-0-x86\_64:1 using elastic/kibana: 8.2.3 When a nodejs lambda is a target for a load balancer the tra… --- ## [Filebeat Tomcat module Access logs](https://discuss.elastic.co/t/filebeat-tomcat-module-access-logs/291468)
**Author:** [@searchtool](https://discuss.elastic.co/u/searchtool)\ **Replies:** 0\ **Last updated:** [December 10, 2021, 9:01pm UTC](https://discuss.elastic.co/t/filebeat-tomcat-module-access-logs/291468 "2021-12-10T21:01:11Z")
In response to this previous topic. Documentation mentions tomcat Access logs. This is a module for receiving Apache Tomcat access logs over Syslog or a file. I believe this is not correct and should just be just to… --- ## [Log file size vs. quantity](https://discuss.elastic.co/t/log-file-size-vs-quantity/168090)
**Author:** [@nskerl](https://discuss.elastic.co/u/nskerl)\ **Replies:** 0\ **Last updated:** [February 12, 2019, 5:32pm UTC](https://discuss.elastic.co/t/log-file-size-vs-quantity/168090 "2019-02-12T17:32:31Z")
While troubleshooting high cpu usage by Filebeat (80% sustained, even when logs are idle), I noticed it showed a large number of files (current: 8811) in the registrar: "harvester":{"open\_files":4,"running":4}},"libbeat… --- ## [How to create a heatmap chart?](https://discuss.elastic.co/t/how-to-create-a-heatmap-chart/329427)
**Author:** [@OlegG](https://discuss.elastic.co/u/OlegG)\ **Replies:** 2\ **Last updated:** [April 7, 2023, 6:05am UTC](https://discuss.elastic.co/t/how-to-create-a-heatmap-chart/329427 "2023-04-07T06:05:21Z")
The vertical axis is days (not configured, but this is my desire), the horizontal is the hours of one day (not configured, but this is my desire), the resulting squares from their intersection are the counter of what … --- ## [Filebeat : Split the multiline json(array of json object) from message field to separate fields](https://discuss.elastic.co/t/filebeat-split-the-multiline-json-array-of-json-object-from-message-field-to-separate-fields/294134)
**Author:** [@Magesh\_02](https://discuss.elastic.co/u/Magesh_02)\ **Replies:** 2\ **Last updated:** [January 12, 2022, 1:08pm UTC](https://discuss.elastic.co/t/filebeat-split-the-multiline-json-array-of-json-object-from-message-field-to-separate-fields/294134 "2022-01-12T13:08:05Z")
I need to use filebeat to push my json data into Elasticsearch, but I'm having trouble decoding my json fields into separate fields extracted from the message field. Filebeat version : 7.16.2 Filebeat.yml filebeat.inp… --- ## [Changing logstash config in docker container](https://discuss.elastic.co/t/changing-logstash-config-in-docker-container/131138)
**Author:** [@skaldenmet](https://discuss.elastic.co/u/skaldenmet)\ **Replies:** 2\ **Last updated:** [May 17, 2018, 1:59pm UTC](https://discuss.elastic.co/t/changing-logstash-config-in-docker-container/131138 "2018-05-17T13:59:59Z")
Hi, I would like to reload the logstash configuration files automatically after they have changed. Normally this should happen with bin/logstash –f apache.config --config.reload.automatic but the docker container in log… --- ## [Python DSL syntax](https://discuss.elastic.co/t/python-dsl-syntax/93582)
**Author:** [@rugenl](https://discuss.elastic.co/u/rugenl)\ **Replies:** 2\ **Last updated:** [July 21, 2017, 6:30pm UTC](https://discuss.elastic.co/t/python-dsl-syntax/93582 "2017-07-21T18:30:19Z")
I have a working search consisting of the first 3 lines of this: = Search(using=client, index="exchange-\*") \\ .query("match", type="iis") \\ .filter("range", \*\* {'@timestamp': {'gte': 'now-1440m', 'lt': 'now'}}) … --- ## [JSON input for heatmap Kibana 5.2.1](https://discuss.elastic.co/t/json-input-for-heatmap-kibana-5-2-1/77491)
**Author:** [@Akaren](https://discuss.elastic.co/u/Akaren)\ **Replies:** 2\ **Last updated:** [March 10, 2017, 10:00am UTC](https://discuss.elastic.co/t/json-input-for-heatmap-kibana-5-2-1/77491 "2017-03-10T10:00:45Z")
I am having filed "\_type" with values 'call-end', 'call-attempt' and more. I want to divide count of 'call-attempt' with count of 'call-end' (failure/success) and display it in heatmap. Here is my JSON input: {"script… --- ## [Oracle JDBC River Configuration Issue](https://discuss.elastic.co/t/oracle-jdbc-river-configuration-issue/2283)
**Author:** [@Shaun\_Wells](https://discuss.elastic.co/u/Shaun_Wells)\ **Replies:** 2\ **Last updated:** [June 10, 2015, 6:49pm UTC](https://discuss.elastic.co/t/oracle-jdbc-river-configuration-issue/2283 "2015-06-10T18:49:48Z")
Hi, I've been playing about with ES 1.4.4 and Logstash.. I've managed to setup a logstash filter to read a csv file containing the results of a query from Oracle.. Now I've got what I want, I would like to automate this … --- ## [Rollup data in ES](https://discuss.elastic.co/t/rollup-data-in-es/19926)
**Author:** [@Srinath\_C](https://discuss.elastic.co/u/Srinath_C)\ **Replies:** 2\ **Last updated:** [September 24, 2014, 1:39pm UTC](https://discuss.elastic.co/t/rollup-data-in-es/19926 "2014-09-24T13:39:40Z")
Hi, We are currently utilizing ES for analyzing the last 24 hours of data. The arrival rate of data is of the order of a few hundreds per 10 second interval with each document having a timestamp associated with it… --- ## [Cluster connection issues when the machines hosting the nodes are restarted for service maintanance](https://discuss.elastic.co/t/cluster-connection-issues-when-the-machines-hosting-the-nodes-are-restarted-for-service-maintanance/12427)
**Author:** [@Mxims\_2](https://discuss.elastic.co/u/Mxims_2)\ **Replies:** 6\ **Last updated:** [June 26, 2013, 5:55am UTC](https://discuss.elastic.co/t/cluster-connection-issues-when-the-machines-hosting-the-nodes-are-restarted-for-service-maintanance/12427 "2013-06-26T05:55:25Z")
We currently have ElasticSearch version 20.5 running in Production (on Windows 2008 64-bit) indexing and searching thousands of documents for the past 2+ months. So far everything is working just fine, however we are… --- ## [Extract data from elasticsearch and store into mongodb](https://discuss.elastic.co/t/extract-data-from-elasticsearch-and-store-into-mongodb/318337)
**Author:** [@chinmoy\_padhi](https://discuss.elastic.co/u/chinmoy_padhi)\ **Replies:** 4\ **Last updated:** [November 11, 2022, 7:44am UTC](https://discuss.elastic.co/t/extract-data-from-elasticsearch-and-store-into-mongodb/318337 "2022-11-11T07:44:32Z")
Hi, I'm looking for an option to extract data from Elasticsearch and store into the mongodb using some python script. Please help me with that. --- ## [Month starts in the middle on Timelion intervals](https://discuss.elastic.co/t/month-starts-in-the-middle-on-timelion-intervals/143654)
**Author:** [@Domenico\_Raimondi](https://discuss.elastic.co/u/Domenico_Raimondi)\ **Replies:** 4\ **Last updated:** [August 23, 2018, 3:28pm UTC](https://discuss.elastic.co/t/month-starts-in-the-middle-on-timelion-intervals/143654 "2018-08-23T15:28:33Z")
Hello, this is a very similar question to Quarter date histogram in Kibana 4 Basically, when I'm creating a timelion graph with a custom interval=1M, months start on the 15th or the 16th... which is not intuitive. :slig… --- ## [Continuous Transform Timestamp isn't a timestamp](https://discuss.elastic.co/t/continuous-transform-timestamp-isnt-a-timestamp/238594)
**Author:** [@mykael](https://discuss.elastic.co/u/mykael)\ **Replies:** 3\ **Last updated:** [June 29, 2020, 7:10pm UTC](https://discuss.elastic.co/t/continuous-transform-timestamp-isnt-a-timestamp/238594 "2020-06-29T19:10:00Z")
Set up a continuous transform, grouping by a time historgram driven from the @timestamp field. The transform contains an @timestamp value, but it's classified as a number rather than as a date (according to Kibana when … --- ## [Kibana limit for Geojson file upload](https://discuss.elastic.co/t/kibana-limit-for-geojson-file-upload/216749)
**Author:** [@Prabhakar\_Rajagopal](https://discuss.elastic.co/u/Prabhakar_Rajagopal)\ **Replies:** 3\ **Last updated:** [January 31, 2020, 1:32pm UTC](https://discuss.elastic.co/t/kibana-limit-for-geojson-file-upload/216749 "2020-01-31T13:32:35Z")
There is a limit of 50MB file size to upload maps in Geojson to ES. This is really small. How do I load larger map datasets into ES? --- ## [FSCrawler won't crawl new files](https://discuss.elastic.co/t/fscrawler-wont-crawl-new-files/102491)
**Author:** [@Quix0r](https://discuss.elastic.co/u/Quix0r)\ **Replies:** 3\ **Last updated:** [October 3, 2017, 6:01am UTC](https://discuss.elastic.co/t/fscrawler-wont-crawl-new-files/102491 "2017-10-03T06:01:55Z")
The crawler seem not to add any new files. So I investigated and found below warning message on all profiles: Can't find stored field name to check existing filenames in path \[/some/path\]. Please set store: true on fiel… --- ## [How to feed entire logfile to elasticsearch as a message](https://discuss.elastic.co/t/how-to-feed-entire-logfile-to-elasticsearch-as-a-message/54518)
**Author:** [@sharath3185](https://discuss.elastic.co/u/sharath3185)\ **Replies:** 3\ **Last updated:** [July 13, 2016, 6:53am UTC](https://discuss.elastic.co/t/how-to-feed-entire-logfile-to-elasticsearch-as-a-message/54518 "2016-07-13T06:53:57Z")
'm trying to use logstash to feed a whole text file as a message into ElasticSearch. I have used multiline filter now as below. multiline { pattern =\> "/.\*./gm" negate =\> true what =\> … --- ## [How to set up kafka output partition option: hash.hash or key?](https://discuss.elastic.co/t/how-to-set-up-kafka-output-partition-option-hash-hash-or-key/102311)
**Author:** [@filebeater](https://discuss.elastic.co/u/filebeater)\ **Replies:** 1\ **Last updated:** [October 4, 2017, 11:30am UTC](https://discuss.elastic.co/t/how-to-set-up-kafka-output-partition-option-hash-hash-or-key/102311 "2017-10-04T11:30:13Z")
Hello, Can I set up kafka partitions as follows? partition: hash hash.hash to be combination of beat.hostname + source? key to be the same as beat.hostname + source? I am wondering what should be the correct synta… --- ## [Repo register issue](https://discuss.elastic.co/t/repo-register-issue/296016)
**Author:** [@Levan\_Medoshvili](https://discuss.elastic.co/u/Levan_Medoshvili)\ **Replies:** 5\ **Last updated:** [February 2, 2022, 11:41am UTC](https://discuss.elastic.co/t/repo-register-issue/296016 "2022-02-02T11:41:26Z")
Hello I have Elasticsearch installed in Windows Server. I want to take snapshot and restore it in another server. I have added in Elasticsearch.yml file path.repo and location path.repo: "D:\\ES\_Backup" When I am try… --- ## [Missing documents after elastic restart](https://discuss.elastic.co/t/missing-documents-after-elastic-restart/290210)
**Author:** [@adminunix](https://discuss.elastic.co/u/adminunix)\ **Replies:** 5\ **Last updated:** [November 26, 2021, 9:28am UTC](https://discuss.elastic.co/t/missing-documents-after-elastic-restart/290210 "2021-11-26T09:28:16Z")
Hello, I have had a strange issue. An index has lost many documents and the elastic logs doesn´t show any message about it. These are monitoring visualizations about the index: I have noticed this issue after res… --- ## [Elasticsearch 6.8.12 os.cpu always 100 although load varies and stays below number of processors](https://discuss.elastic.co/t/elasticsearch-6-8-12-os-cpu-always-100-although-load-varies-and-stays-below-number-of-processors/260136)
**Author:** [@span](https://discuss.elastic.co/u/span)\ **Replies:** 5\ **Last updated:** [January 5, 2021, 11:28am UTC](https://discuss.elastic.co/t/elasticsearch-6-8-12-os-cpu-always-100-although-load-varies-and-stays-below-number-of-processors/260136 "2021-01-05T11:28:21Z")
I have a small elastic cluster running on Kubernetes 1.18 in AKS. It has 3 ingest nodes, 3 masters and 4 data nodes. I do not have much data, only a few gigabytes spread over a dozen indices. It has been setup using Helm… --- ## [How does watcher throttling work?](https://discuss.elastic.co/t/how-does-watcher-throttling-work/234615)
**Author:** [@Abhimanyu\_Garg](https://discuss.elastic.co/u/Abhimanyu_Garg)\ **Replies:** 5\ **Last updated:** [May 29, 2020, 11:59am UTC](https://discuss.elastic.co/t/how-does-watcher-throttling-work/234615 "2020-05-29T11:59:52Z")
Hi all, We are trying to configure watchers with throttling period so that we do not receive duplicate notifications of same alerts. We were expecting throttling period to work in two ways- If watcher condition is tru… --- ## [How can i send duplicate lines (from logstash to elasticsearch) in log file](https://discuss.elastic.co/t/how-can-i-send-duplicate-lines-from-logstash-to-elasticsearch-in-log-file/222064)
**Author:** [@chandanachk](https://discuss.elastic.co/u/chandanachk)\ **Replies:** 5\ **Last updated:** [March 16, 2020, 4:38am UTC](https://discuss.elastic.co/t/how-can-i-send-duplicate-lines-from-logstash-to-elasticsearch-in-log-file/222064 "2020-03-16T04:38:42Z")
I'm a beginner of this area and i want to send duplicate lines of a log file to elastic search. currently it is identifying duplicates and send only one line, sample log file 00:00:59,62.10.38.47,39473311,"POST /v0.1/te… --- ## [SIEM not ingesting Forwarded Windows logs](https://discuss.elastic.co/t/siem-not-ingesting-forwarded-windows-logs/207311)
**Author:** [@mustdiee](https://discuss.elastic.co/u/mustdiee)\ **Replies:** 5\ **Last updated:** [November 14, 2019, 5:54pm UTC](https://discuss.elastic.co/t/siem-not-ingesting-forwarded-windows-logs/207311 "2019-11-14T17:54:34Z")
Hello! I'am collecting logs from all Windows PCs in my infrastructure with EventForwarding. Only one server has a winlogbeat installed, which is configured on other workstations as a subscription server (this is the eas… --- ## [Logstash - Parsing Log Messages](https://discuss.elastic.co/t/logstash-parsing-log-messages/132630)
**Author:** [@Sunillinus](https://discuss.elastic.co/u/Sunillinus)\ **Replies:** 5\ **Last updated:** [May 23, 2018, 6:00am UTC](https://discuss.elastic.co/t/logstash-parsing-log-messages/132630 "2018-05-23T06:00:38Z")
Hi, I have a log file which contains a timestamp and logs message as shown below: I need one multiple pattern such that if the line does not start with the timestamp it should be joined with the preceding line. Can any… --- ## [Kibana 6 plugin server/API setup not working](https://discuss.elastic.co/t/kibana-6-plugin-server-api-setup-not-working/117106)
**Author:** [@srbdev](https://discuss.elastic.co/u/srbdev)\ **Replies:** 5\ **Last updated:** [January 25, 2018, 8:13pm UTC](https://discuss.elastic.co/t/kibana-6-plugin-server-api-setup-not-working/117106 "2018-01-25T20:13:40Z")
Back in Kibana 4.5.0, I had a plugin acting as a REST API endpoint using the following code: // plugins/plugin\_name/index.js export default function (kibana) { const http = require('http'); return new kibana.Plugin… --- ## [Index template is not visible in ilm](https://discuss.elastic.co/t/index-template-is-not-visible-in-ilm/205799)
**Author:** [@deepak\_deore](https://discuss.elastic.co/u/deepak_deore)\ **Replies:** 2\ **Last updated:** [November 22, 2019, 9:39am UTC](https://discuss.elastic.co/t/index-template-is-not-visible-in-ilm/205799 "2019-11-22T09:39:42Z")
Kibana shows .logstash-management template but "Add policy to index template" option under "Index Lifecycle Policies" doesn't show this index I want to apply the policy to the .logstash\* indices, what could be the … --- ## [How to auto delete empty indices?](https://discuss.elastic.co/t/how-to-auto-delete-empty-indices/150095)
**Author:** [@xlbrlx](https://discuss.elastic.co/u/xlbrlx)\ **Replies:** 2\ **Last updated:** [September 27, 2018, 2:09am UTC](https://discuss.elastic.co/t/how-to-auto-delete-empty-indices/150095 "2018-09-27T02:09:16Z")
Hi there, What are ways to auto delete empty indices on elasticsearch 6.2? --- ## [Division of sum aggregation by the count of the bucket](https://discuss.elastic.co/t/division-of-sum-aggregation-by-the-count-of-the-bucket/132688)
**Author:** [@siddharth\_jain](https://discuss.elastic.co/u/siddharth_jain)\ **Replies:** 2\ **Last updated:** [May 22, 2018, 6:30am UTC](https://discuss.elastic.co/t/division-of-sum-aggregation-by-the-count-of-the-bucket/132688 "2018-05-22T06:30:41Z")
Greetings. I have term buckets, on which I have a metric which tells the sum of some event for each bucket, say "abstractEvent", I want to calculate the percentage of this abstractEvent metric, ie. I want to calculate t… --- ## [Dynamic Sub Aggregations using Nest](https://discuss.elastic.co/t/dynamic-sub-aggregations-using-nest/71381)
**Author:** [@Santhosh\_Moorthy](https://discuss.elastic.co/u/Santhosh_Moorthy)\ **Replies:** 2\ **Last updated:** [January 17, 2017, 4:57am UTC](https://discuss.elastic.co/t/dynamic-sub-aggregations-using-nest/71381 "2017-01-17T04:57:16Z")
I want to dynamically create sub aggregations on Nest search query from a List or Dictionary. The below query with pre-defined terms is working fine. But i want to form the query on run time from a list or dictionary. c… --- ## [Kibana - aggregation in graphs (average number of things per bucket)](https://discuss.elastic.co/t/kibana-aggregation-in-graphs-average-number-of-things-per-bucket/311291)
**Author:** [@RonGros](https://discuss.elastic.co/u/RonGros)\ **Replies:** 7\ **Last updated:** [August 16, 2022, 10:57am UTC](https://discuss.elastic.co/t/kibana-aggregation-in-graphs-average-number-of-things-per-bucket/311291 "2022-08-16T10:57:53Z")
Hi, I have a situation and I am stuck, I think what I want to do is not currently achievable but I hope I'm wrong. Let's assume I have the following data about people going to the movies: Name of person Which movies … --- ## [Is there a configuration in esrally to replicate the track data X times or run index-append for a specific period of time?](https://discuss.elastic.co/t/is-there-a-configuration-in-esrally-to-replicate-the-track-data-x-times-or-run-index-append-for-a-specific-period-of-time/186999)
**Author:** [@Ali\_Reza\_Haghighat](https://discuss.elastic.co/u/Ali_Reza_Haghighat)\ **Replies:** 7\ **Last updated:** [June 24, 2019, 8:04am UTC](https://discuss.elastic.co/t/is-there-a-configuration-in-esrally-to-replicate-the-track-data-x-times-or-run-index-append-for-a-specific-period-of-time/186999 "2019-06-24T08:04:20Z")
Hello, I'm a newbie to elastic and esrally. I'm using esrally to benchmark our elastic cluster. Currently, I want to measure the index-append rate of our cluster using our sample data. With the default configuration, th… --- ## [Installing Elasticsearch on CentOS using RPM](https://discuss.elastic.co/t/installing-elasticsearch-on-centos-using-rpm/109143)
**Author:** [@AndyB](https://discuss.elastic.co/u/AndyB)\ **Replies:** 7\ **Last updated:** [November 26, 2017, 8:23pm UTC](https://discuss.elastic.co/t/installing-elasticsearch-on-centos-using-rpm/109143 "2017-11-26T20:23:28Z")
Hello, I'm currently running ElasticSearch Version: 5.0.1 on my CentOS dedicated server. It also has cPanel, but I assume the easiest way for me to upgrade to ElasticSearch 6.0.0 is to use the RPM instruction located he… --- ## [afterBulk() метод](https://discuss.elastic.co/t/afterbulk/80466)
**Author:** [@Katja](https://discuss.elastic.co/u/Katja)\ **Replies:** 7\ **Last updated:** [March 31, 2017, 1:35pm UTC](https://discuss.elastic.co/t/afterbulk/80466 "2017-03-31T13:35:08Z")
Здравствуйте, подскажите, пожалуйста, с таким вопросом. Я индексирую документы с помощью BulkProcessor. У меня такой user case: "An application has critical data and might decide to stop passing requests to bulk proce… --- ## [Retrieve localhost:9200/\_aliases using the java api](https://discuss.elastic.co/t/retrieve-localhost-9200--aliases-using-the-java-api/15332)
**Author:** [@Emilie\_Lavigne](https://discuss.elastic.co/u/Emilie_Lavigne)\ **Replies:** 7\ **Last updated:** [January 22, 2014, 10:43pm UTC](https://discuss.elastic.co/t/retrieve-localhost-9200--aliases-using-the-java-api/15332 "2014-01-22T22:43:16Z")
Is there a way to reproduce localhost:9200/\_aliases using the java api? Our system often needs to request the list of indices available (our indices are organized by date) to identify which days in the query date r… --- ## [Include scripted field in Kibana monitor extraction query](https://discuss.elastic.co/t/include-scripted-field-in-kibana-monitor-extraction-query/222467)
**Author:** [@beam022](https://discuss.elastic.co/u/beam022)\ **Replies:** 1\ **Last updated:** [March 12, 2020, 2:37pm UTC](https://discuss.elastic.co/t/include-scripted-field-in-kibana-monitor-extraction-query/222467 "2020-03-12T14:37:28Z")
Hi, I’m defining a monitor for Kibana alerting and I’d like to include the service scripted field (which I’ve prepared) in the \_source (or any other accessible field). I’d like to use that information in the Slack no… --- ## [Empty drop down list: Filtering occurs on field which does not exist](https://discuss.elastic.co/t/empty-drop-down-list-filtering-occurs-on-field-which-does-not-exist/190898)
**Author:** [@besser](https://discuss.elastic.co/u/besser)\ **Replies:** 1\ **Last updated:** [July 17, 2019, 12:50pm UTC](https://discuss.elastic.co/t/empty-drop-down-list-filtering-occurs-on-field-which-does-not-exist/190898 "2019-07-17T12:50:35Z")
Hi there, we're having problems using a dashboard containing a drop down list control. The drop down wont show options, even though direct search for the given keyword does return results, i.e. those keyword do exist (ho… --- ## [What is the best way to compress a snapshot data?](https://discuss.elastic.co/t/what-is-the-best-way-to-compress-a-snapshot-data/35990)
**Author:** [@notxcain](https://discuss.elastic.co/u/notxcain)\ **Replies:** 1\ **Last updated:** [December 1, 2015, 7:36am UTC](https://discuss.elastic.co/t/what-is-the-best-way-to-compress-a-snapshot-data/35990 "2015-12-01T07:36:55Z")
We have a lot of data in our daily indexes (like 200GB), so what is the best way to compress a daily index snapshot. As we need to store some of them up to 6 month due to legal requirements. --- ## [Monitoring specific processes via Elastic Agent?](https://discuss.elastic.co/t/monitoring-specific-processes-via-elastic-agent/350037)
**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\ **Replies:** 3\ **Last updated:** [January 23, 2024, 11:31pm UTC](https://discuss.elastic.co/t/monitoring-specific-processes-via-elastic-agent/350037 "2024-01-23T23:31:21Z")
Does anyone have a good method for monitoring that specific processes are running, even if said processes are not in the top N cpu/ram usage group? The System integration lets you monitor the Top N processes. You can li… [Previous page](https://discuss.elastic.co/top.md?page=1067&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1069&per_page=50&period=all)