# Top **URL:** https://discuss.elastic.co/top.md?page=1072&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1073 --- ## [Suggester for "related searches"](https://discuss.elastic.co/t/suggester-for-related-searches/14422)
**Author:** [@Frank\_Maritato](https://discuss.elastic.co/u/Frank_Maritato)\ **Replies:** 2\ **Last updated:** [November 22, 2013, 3:17am UTC](https://discuss.elastic.co/t/suggester-for-related-searches/14422 "2013-11-22T03:17:01Z")
It looks like the term and phrase suggesters really only provide misspelling suggestions. Is it possible to use either of these for a "related searches" type of functionality? For example, I have a bunch of produ… --- ## [How to run filebeat on azure app service](https://discuss.elastic.co/t/how-to-run-filebeat-on-azure-app-service/230564)
**Author:** [@Dheeraj\_Bhargav](https://discuss.elastic.co/u/Dheeraj_Bhargav)\ **Replies:** 1\ **Last updated:** [April 30, 2020, 2:29pm UTC](https://discuss.elastic.co/t/how-to-run-filebeat-on-azure-app-service/230564 "2020-04-30T14:29:58Z")
Hello, Has anyone got Filebeat to work in an Azure App Service? I'm interested in how I can send the IIS logs using the IIS module from Filebeat running as a webjob to our Elastic cloud cluster. Please let me know, Th… --- ## [Unable to create index sorting](https://discuss.elastic.co/t/unable-to-create-index-sorting/166019)
**Author:** [@anjireddy543](https://discuss.elastic.co/u/anjireddy543)\ **Replies:** 1\ **Last updated:** [February 1, 2019, 9:21am UTC](https://discuss.elastic.co/t/unable-to-create-index-sorting/166019 "2019-02-01T09:21:13Z")
Hi, I want to create index sorting for my documents by default on date. In the mappings i have another field which is nested array. In documentation i have read that we cannot create index sorting if index contains nes… --- ## [Add new field based on another field](https://discuss.elastic.co/t/add-new-field-based-on-another-field/160064)
**Author:** [@Ivan44785372](https://discuss.elastic.co/u/Ivan44785372)\ **Replies:** 1\ **Last updated:** [December 9, 2018, 7:35pm UTC](https://discuss.elastic.co/t/add-new-field-based-on-another-field/160064 "2018-12-09T19:35:45Z")
Hello. I have such field in filebeat output docker.container.labels.app it looks like this: "docker" =\> { "container" =\> { "id" =\> "7549e137-3394-987d-f3cc-f79759851a62", "l… --- ## [Unable to download data from https://rubygems.org - certificate verify failed](https://discuss.elastic.co/t/unable-to-download-data-from-https-rubygems-org-certificate-verify-failed/40629)
**Author:** [@DK\_3](https://discuss.elastic.co/u/DK_3)\ **Replies:** 1\ **Last updated:** [February 1, 2016, 8:42pm UTC](https://discuss.elastic.co/t/unable-to-download-data-from-https-rubygems-org-certificate-verify-failed/40629 "2016-02-01T20:42:05Z")
I'm hitting the following when trying to install a Logstash plugin /logstash/bin/plugin install logstash-input-courier Validating logstash-input-courier Unable to download data from https://rubygems.org - certificate … --- ## [Predict line in Kibana](https://discuss.elastic.co/t/predict-line-in-kibana/39945)
**Author:** [@pittoch](https://discuss.elastic.co/u/pittoch)\ **Replies:** 1\ **Last updated:** [January 24, 2016, 4:03am UTC](https://discuss.elastic.co/t/predict-line-in-kibana/39945 "2016-01-24T04:03:46Z")
Hi, I feel that it is possible to predict a curve In the preview video below to 38minutes and 12s , the video shows the prediction curve using " predict " https://www.elastic.co/webinars/elasticsearch-2-0-overview?baym… --- ## [No connection between Kafka and Logstash](https://discuss.elastic.co/t/no-connection-between-kafka-and-logstash/130260)
**Author:** [@TheAnonymousModeIT](https://discuss.elastic.co/u/TheAnonymousModeIT)\ **Replies:** 3\ **Last updated:** [May 4, 2018, 12:02pm UTC](https://discuss.elastic.co/t/no-connection-between-kafka-and-logstash/130260 "2018-05-04T12:02:22Z")
Hi, I had a working configuration: Logstash Standard Input -\> Output to Elasticsearch -\> Kibana I started Logstash and entered some text (like "test1") in the standard input. Logstash wrote it into Elasticsearch and … --- ## [Logstash Grok Filter IIS parsing to ElasticSearch](https://discuss.elastic.co/t/logstash-grok-filter-iis-parsing-to-elasticsearch/119067)
**Author:** [@Edouard\_Fazenda](https://discuss.elastic.co/u/Edouard_Fazenda)\ **Replies:** 0\ **Last updated:** [February 8, 2018, 2:28pm UTC](https://discuss.elastic.co/t/logstash-grok-filter-iis-parsing-to-elasticsearch/119067 "2018-02-08T14:28:28Z")
Dear Comunity, I explain the situation, I have Filebeat installed in a server where there is an IIS configured , I retrieve the logs and send them to a logstash server which will output to a elasticsearch node. This is… --- ## [Remove HTML tag from rss input logstash plugin](https://discuss.elastic.co/t/remove-html-tag-from-rss-input-logstash-plugin/71072)
**Author:** [@jamal](https://discuss.elastic.co/u/jamal)\ **Replies:** 3\ **Last updated:** [January 15, 2017, 10:23am UTC](https://discuss.elastic.co/t/remove-html-tag-from-rss-input-logstash-plugin/71072 "2017-01-15T10:23:19Z")
I am using logstash rss input plugin to index rss feeds in elasticsearch, but I get text and html tag whic i just want to get text not html tag. any one can say me which filter plugin should I use and how to filter it … --- ## [Assistance with grok filter](https://discuss.elastic.co/t/assistance-with-grok-filter/43954)
**Author:** [@Don\_Pich](https://discuss.elastic.co/u/Don_Pich)\ **Replies:** 3\ **Last updated:** [March 11, 2016, 8:44pm UTC](https://discuss.elastic.co/t/assistance-with-grok-filter/43954 "2016-03-11T20:44:42Z")
So my grok is working great, but my index is not creating new fields as I would expect (new field as in 'entryDateTime', 'user', and 'event'). First off, here is the data in my log file: 2016-03-09T16:22:39-06:00|dpich… --- ## ["too many open files" problems and suggestions on cluster configuration](https://discuss.elastic.co/t/too-many-open-files-problems-and-suggestions-on-cluster-configuration/23513)
**Author:** [@Ann\_Yablunovskaya](https://discuss.elastic.co/u/Ann_Yablunovskaya)\ **Replies:** 3\ **Last updated:** [May 1, 2015, 3:39pm UTC](https://discuss.elastic.co/t/too-many-open-files-problems-and-suggestions-on-cluster-configuration/23513 "2015-05-01T15:39:38Z")
I am looking for suggestions on cluster configuration. I have 2 nodes (master/data and data), 544 indices, about 800 mil documents. If I try to insert more documents and create more indices, I will catch error "t… --- ## [Time series visual builder (tsvb): Change the x-axis](https://discuss.elastic.co/t/time-series-visual-builder-tsvb-change-the-x-axis/207743)
**Author:** [@justinw](https://discuss.elastic.co/u/justinw)\ **Replies:** 3\ **Last updated:** [December 2, 2019, 8:09pm UTC](https://discuss.elastic.co/t/time-series-visual-builder-tsvb-change-the-x-axis/207743 "2019-12-02T20:09:15Z")
Hi! Does anyone have insight -- we'd like to change the x-axis of our tsvb graph to use another field. It's a strictly increasing integer associated with our documents. This is possible with the other visualization type… --- ## [APM index failing ILM rollover](https://discuss.elastic.co/t/apm-index-failing-ilm-rollover/197823)
**Author:** [@ethranes](https://discuss.elastic.co/u/ethranes)\ **Replies:** 5\ **Last updated:** [September 4, 2019, 11:51am UTC](https://discuss.elastic.co/t/apm-index-failing-ilm-rollover/197823 "2019-09-04T11:51:05Z")
Hi, I have my APM setup, and I thought I setit up correctly for ILM, it rolled over once from 0000001 to 0000002 but now the index won't rollover, I get the following error illegal\_argument\_exception: setting \[index.lif… --- ## [Auditbeat - SIEM](https://discuss.elastic.co/t/auditbeat-siem/187853)
**Author:** [@cob](https://discuss.elastic.co/u/cob)\ **Replies:** 5\ **Last updated:** [July 12, 2019, 12:46am UTC](https://discuss.elastic.co/t/auditbeat-siem/187853 "2019-07-12T00:46:12Z")
Hello All, I'm currently playing with and testing out the SIEM plugin. However, as soon as I feed it Auditbeat data, I seem to get a message error which I'm not really sure about. I thought that the SIEM would work nati… --- ## [Disable \_source field from indexing](https://discuss.elastic.co/t/disable-source-field-from-indexing/334486)
**Author:** [@Mhag](https://discuss.elastic.co/u/Mhag)\ **Replies:** 6\ **Last updated:** [May 29, 2023, 2:47am UTC](https://discuss.elastic.co/t/disable-source-field-from-indexing/334486 "2023-05-29T02:47:27Z")
Hi, To reduce the size of an indice I decide not to store \_source field in elasticsearch, but I got this error when I try to diable it. PUT /myindice/\_mapping { "properties": { "\_source": { "enabled": fals… --- ## [How can i insert the history data into TSDB](https://discuss.elastic.co/t/how-can-i-insert-the-history-data-into-tsdb/318075)
**Author:** [@bo8888](https://discuss.elastic.co/u/bo8888)\ **Replies:** 6\ **Last updated:** [November 3, 2022, 12:02pm UTC](https://discuss.elastic.co/t/how-can-i-insert-the-history-data-into-tsdb/318075 "2022-11-03T12:02:40Z")
I study Set up a time series data stream (TSDS) | Elasticsearch Guide \[8.5\] | Elastic but i insert the data ,found a error PUT metrics-weather\_sensors-dev/\_bulk { "create":{ } } { "@timestamp": "2099-05-06T16:21:15.00… --- ## [Elastic On-primise price](https://discuss.elastic.co/t/elastic-on-primise-price/316380)
**Author:** [@laale](https://discuss.elastic.co/u/laale)\ **Replies:** 6\ **Last updated:** [October 13, 2022, 2:13pm UTC](https://discuss.elastic.co/t/elastic-on-primise-price/316380 "2022-10-13T14:13:30Z")
Hello community We want to use elastic endpoint security on-premise deployment so is there is any who knows the price of on-premise license? --- ## [This builder doesn't allow terms that are larger than 1,000 characters](https://discuss.elastic.co/t/this-builder-doesnt-allow-terms-that-are-larger-than-1-000-characters/228529)
**Author:** [@lmourer](https://discuss.elastic.co/u/lmourer)\ **Replies:** 6\ **Last updated:** [May 11, 2020, 8:13am UTC](https://discuss.elastic.co/t/this-builder-doesnt-allow-terms-that-are-larger-than-1-000-characters/228529 "2020-05-11T08:13:33Z")
Hello, Kibana 7.6.2 Elasticsearch 7.6.2 Ubuntu 18.04 When i want to filter a keyword in discover in kibana, i have this error : { "took": 10, "timed\_out": false, "\_shards": { "total": 14, "successful… --- ## [Results from different nodes with custom (string) value for preference=](https://discuss.elastic.co/t/results-from-different-nodes-with-custom-string-value-for-preference/178493)
**Author:** [@Thijs](https://discuss.elastic.co/u/Thijs)\ **Replies:** 6\ **Last updated:** [May 7, 2019, 10:47am UTC](https://discuss.elastic.co/t/results-from-different-nodes-with-custom-string-value-for-preference/178493 "2019-05-07T10:47:50Z")
Hi, When passing a custom (string) value as a preference parameter to a search request, we get results from different nodes after repeating the same query (with the same custom value). It looks like the custom value is… --- ## [Elasticsearch htop showing 75 % memory usesd](https://discuss.elastic.co/t/elasticsearch-htop-showing-75-memory-usesd/142274)
**Author:** [@Dilip\_Kumar](https://discuss.elastic.co/u/Dilip_Kumar)\ **Replies:** 7\ **Last updated:** [July 31, 2018, 7:36am UTC](https://discuss.elastic.co/t/elasticsearch-htop-showing-75-memory-usesd/142274 "2018-07-31T07:36:26Z")
Hi i am using es 5.6 with two nodes, first node using 76 % memory (total 16 gb), mlock already true. please suggest to reduce this % memory. --- ## [Kibana is not accessible from external browser](https://discuss.elastic.co/t/kibana-is-not-accessible-from-external-browser/271636)
**Author:** [@almotasim90](https://discuss.elastic.co/u/almotasim90)\ **Replies:** 4\ **Last updated:** [April 29, 2021, 3:37pm UTC](https://discuss.elastic.co/t/kibana-is-not-accessible-from-external-browser/271636 "2021-04-29T15:37:04Z")
Hello, I am trying to install Elasticsearch and Kibana on Debian 10. they both work and active in the current machine. I want to access Kibana through different machine's browser, but it cannot be reached. I have chan… --- ## [ELK 6.0.0 And Xpack 6.0.0 Username password is not working](https://discuss.elastic.co/t/elk-6-0-0-and-xpack-6-0-0-username-password-is-not-working/109196)
**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\ **Replies:** 4\ **Last updated:** [November 28, 2017, 12:45pm UTC](https://discuss.elastic.co/t/elk-6-0-0-and-xpack-6-0-0-username-password-is-not-working/109196 "2017-11-28T12:45:41Z")
Hi All , can you please explain the method of username and password entering criteria in Xpack installed ELK ( 6.0.0 ). Before installing Xpack , 6.0.0, ELK is working well. Xpack installed successfully. First I am t… --- ## [ElasticSearch 5.5 two phase search](https://discuss.elastic.co/t/elasticsearch-5-5-two-phase-search/97424)
**Author:** [@dominik.safaric](https://discuss.elastic.co/u/dominik.safaric)\ **Replies:** 4\ **Last updated:** [August 18, 2017, 7:39am UTC](https://discuss.elastic.co/t/elasticsearch-5-5-two-phase-search/97424 "2017-08-18T07:39:53Z")
We are currently in the process of implementing an API for searching related images. The search operates upon feature vectors. In order to determine the level of similarity between two images we calculate the Hamming dis… --- ## [Master node re-join cluster after network outage](https://discuss.elastic.co/t/master-node-re-join-cluster-after-network-outage/59913)
**Author:** [@tenhavenator](https://discuss.elastic.co/u/tenhavenator)\ **Replies:** 4\ **Last updated:** [September 15, 2016, 4:48pm UTC](https://discuss.elastic.co/t/master-node-re-join-cluster-after-network-outage/59913 "2016-09-15T16:48:14Z")
Cluster Setup: I have a cluster with one original node (i.e. a node that does not have discovery.zen.ping.unicast.hosts configured). Multicast discovery is disabled and unicast is enabled. Other nodes are added to the c… --- ## [Port number ECS field data type](https://discuss.elastic.co/t/port-number-ecs-field-data-type/289992)
**Author:** [@groth](https://discuss.elastic.co/u/groth)\ **Replies:** 2\ **Last updated:** [November 23, 2021, 11:42pm UTC](https://discuss.elastic.co/t/port-number-ecs-field-data-type/289992 "2021-11-23T23:42:38Z")
Can someone please explain to me why port number ECS fields like source.port, destination.port, etc. are defined as numerical type long? When would port numbers from logs ever need to be used in any kind of mathematical … --- ## [How to extract specific data from extraction query response](https://discuss.elastic.co/t/how-to-extract-specific-data-from-extraction-query-response/275349)
**Author:** [@marifwanna](https://discuss.elastic.co/u/marifwanna)\ **Replies:** 2\ **Last updated:** [June 10, 2021, 7:51pm UTC](https://discuss.elastic.co/t/how-to-extract-specific-data-from-extraction-query-response/275349 "2021-06-10T19:51:00Z")
I am using an extraction query in monitor to alert me in case the email I send to a user bounces. I am able to get the trigger to work and receive an alert on slack I would like to include the user's email in the alert … --- ## [Failed to decode ndjson new format with python](https://discuss.elastic.co/t/failed-to-decode-ndjson-new-format-with-python/202881)
**Author:** [@GitsBdr](https://discuss.elastic.co/u/GitsBdr)\ **Replies:** 2\ **Last updated:** [October 10, 2019, 6:00am UTC](https://discuss.elastic.co/t/failed-to-decode-ndjson-new-format-with-python/202881 "2019-10-10T06:00:51Z")
Hi here, Thanks in advance for your time and help I can find on the web couple of examples using python scripts to "decode" data from the Kibana API with json Such as : dashboard = requests.get('http://' + hostname +… --- ## [Dedup on hostname](https://discuss.elastic.co/t/dedup-on-hostname/189381)
**Author:** [@hursto75](https://discuss.elastic.co/u/hursto75)\ **Replies:** 2\ **Last updated:** [July 9, 2019, 12:40pm UTC](https://discuss.elastic.co/t/dedup-on-hostname/189381 "2019-07-09T12:40:03Z")
I have a search that should be fairly simple, and cannot figure out how to do it. I want to show the latest result for a string one per hostname. Want to do this in KQL if possible. --- ## [Kibana Discovery panel not showing results for Logstash index with millions of records](https://discuss.elastic.co/t/kibana-discovery-panel-not-showing-results-for-logstash-index-with-millions-of-records/127229)
**Author:** [@jeffkirk1](https://discuss.elastic.co/u/jeffkirk1)\ **Replies:** 2\ **Last updated:** [April 9, 2018, 3:12pm UTC](https://discuss.elastic.co/t/kibana-discovery-panel-not-showing-results-for-logstash-index-with-millions-of-records/127229 "2018-04-09T15:12:29Z")
EDITED: Overnight, the problem I'm complaining about in this post stopped happening, probably because the newest index based on the one I uploaded from Filebeat didn't have whatever problem the old one had, so you can di… --- ## [Password field gets deleted after adding a watch](https://discuss.elastic.co/t/password-field-gets-deleted-after-adding-a-watch/88178)
**Author:** [@azelezni](https://discuss.elastic.co/u/azelezni)\ **Replies:** 2\ **Last updated:** [June 20, 2017, 5:49am UTC](https://discuss.elastic.co/t/password-field-gets-deleted-after-adding-a-watch/88178 "2017-06-20T05:49:23Z")
Hello, I've been trying to add a new watcher that will email a report to multiple users, however after I've added the watch (either via web UI or curl) and try to run it, I get the following error "password is a required… --- ## [Kibana 5.1.2 dont make searchable keywords fields](https://discuss.elastic.co/t/kibana-5-1-2-dont-make-searchable-keywords-fields/71987)
**Author:** [@Alexandr\_Senchenko](https://discuss.elastic.co/u/Alexandr_Senchenko)\ **Replies:** 2\ **Last updated:** [January 19, 2017, 9:44am UTC](https://discuss.elastic.co/t/kibana-5-1-2-dont-make-searchable-keywords-fields/71987 "2017-01-19T09:44:15Z")
Hi, I have in issue with kibana. So, when created mapping with keywords - which is by default not\_analyzed it's not showing in kibana. Please see below: { "affiliate-mapped-data-20170105": { "mappings": { … --- ## [Filebeat. "from kafka to kafka transfer"](https://discuss.elastic.co/t/filebeat-from-kafka-to-kafka-transfer/295342)
**Author:** [@faringot](https://discuss.elastic.co/u/faringot)\ **Replies:** 8\ **Last updated:** [January 28, 2022, 7:31am UTC](https://discuss.elastic.co/t/filebeat-from-kafka-to-kafka-transfer/295342 "2022-01-28T07:31:26Z")
Good day, I'm trying to set up data transfer from one Kafka to another using Filebeat. The current version does not work with SASL\_SSL and I have downloaded 8.0.0-rc1. Found a new error: "Exiting: module kafka is confi… --- ## [SAML Authentication in Elastic Stack with ADFS](https://discuss.elastic.co/t/saml-authentication-in-elastic-stack-with-adfs/121766)
**Author:** [@tatdat](https://discuss.elastic.co/u/tatdat)\ **Replies:** 3\ **Last updated:** [April 9, 2018, 9:51pm UTC](https://discuss.elastic.co/t/saml-authentication-in-elastic-stack-with-adfs/121766 "2018-04-09T21:51:45Z")
I saw this blog. They said about saml authentication in Elastick stack https://www.elastic.co/blog/how-to-enable-saml-authentication-in-kibana-and-elasticsearch Im testing on it. Can we use ADFS with Elastic Stack? T… --- ## [Load metricbeat sample dashboards in 6.1.2](https://discuss.elastic.co/t/load-metricbeat-sample-dashboards-in-6-1-2/116753)
**Author:** [@Ravikumar\_G](https://discuss.elastic.co/u/Ravikumar_G)\ **Replies:** 3\ **Last updated:** [January 31, 2018, 3:39pm UTC](https://discuss.elastic.co/t/load-metricbeat-sample-dashboards-in-6-1-2/116753 "2018-01-31T15:39:53Z")
just wondering so many options changed in ES 6.1.2 version wondersing how to load beats-dashboards-6.1.2.zip now previously in 5.X followed like this \[root@localhost\]# pwd /usr/share/metricbeat/scripts \[root@localhost\]… --- ## [What is the best suitable Elasticsearch architecture?](https://discuss.elastic.co/t/what-is-the-best-suitable-elasticsearch-architecture/95394)
**Author:** [@amruth](https://discuss.elastic.co/u/amruth)\ **Replies:** 3\ **Last updated:** [August 23, 2017, 2:24pm UTC](https://discuss.elastic.co/t/what-is-the-best-suitable-elasticsearch-architecture/95394 "2017-08-23T14:24:50Z")
Hi, I am planning to use Elasticsearch Cluster with 4 different servers with each Node on one server. Out of which 3 Nodes are Master Eligible and Data Nodes and the other is Coordinating only Node(Kibana is also running… --- ## [Filebeat slowing to a halt within 20-30 minutes of starting](https://discuss.elastic.co/t/filebeat-slowing-to-a-halt-within-20-30-minutes-of-starting/83004)
**Author:** [@thedongen](https://discuss.elastic.co/u/thedongen)\ **Replies:** 3\ **Last updated:** [April 21, 2017, 9:02am UTC](https://discuss.elastic.co/t/filebeat-slowing-to-a-halt-within-20-30-minutes-of-starting/83004 "2017-04-21T09:02:41Z")
I'm using the ELK stack to receive and parse logfiles from an Apache server. My Elasticsearch cluster consists of 3 nodes, with Logstash running on one of these nodes. I've set up Filebeat on the machine that stores the… --- ## [Search for phrases with special characters - Attachment Content](https://discuss.elastic.co/t/search-for-phrases-with-special-characters-attachment-content/50797)
**Author:** [@ASN](https://discuss.elastic.co/u/ASN)\ **Replies:** 3\ **Last updated:** [May 24, 2016, 9:56am UTC](https://discuss.elastic.co/t/search-for-phrases-with-special-characters-attachment-content/50797 "2016-05-24T09:56:45Z")
Hi all, Is there any way in which i can search for phrases with special charecters in the content of the attached file? for eg: i want to search for asn@xyz.com in the contents of all the indexed files. I actually tr… --- ## [Problem with received\_from not expanding](https://discuss.elastic.co/t/problem-with-received-from-not-expanding/45276)
**Author:** [@jcurbo](https://discuss.elastic.co/u/jcurbo)\ **Replies:** 3\ **Last updated:** [March 24, 2016, 4:32am UTC](https://discuss.elastic.co/t/problem-with-received-from-not-expanding/45276 "2016-03-24T04:32:49Z")
I just set up my first ELK cluster and I'm having a strange issue I can't track down. I have logstash-forwarder running on the ELK host itself (set it up before I knew filebeat was a thing), and I have an external host… --- ## [PV vs Metrics for benchmarking](https://discuss.elastic.co/t/pv-vs-metrics-for-benchmarking/38085)
**Author:** [@Johntdyer](https://discuss.elastic.co/u/Johntdyer)\ **Replies:** 3\ **Last updated:** [January 4, 2016, 5:21pm UTC](https://discuss.elastic.co/t/pv-vs-metrics-for-benchmarking/38085 "2016-01-04T17:21:24Z")
Hello, I am trying to load test my grok patterns and I am confused on the output of metrics{} vs using codec=\> dots along with pv -War \> /dev/null. I am consuming the same 400,000 log lines as my input so that shou… --- ## [Kibana User management](https://discuss.elastic.co/t/kibana-user-management/36832)
**Author:** [@gugansankar](https://discuss.elastic.co/u/gugansankar)\ **Replies:** 3\ **Last updated:** [December 12, 2015, 12:38am UTC](https://discuss.elastic.co/t/kibana-user-management/36832 "2015-12-12T00:38:52Z")
Kibana is a nice one and can plot our expected reports there. Only problem is with Kibana "User Management". Is there any plan have to release kibana with User \[ admin / normal users\]. As I need to give my Kibana das… --- ## [CPU utilization crossing 98% always](https://discuss.elastic.co/t/cpu-utilization-crossing-98-always/168807)
**Author:** [@kamesh\_siva](https://discuss.elastic.co/u/kamesh_siva)\ **Replies:** 1\ **Last updated:** [February 18, 2019, 7:55pm UTC](https://discuss.elastic.co/t/cpu-utilization-crossing-98-always/168807 "2019-02-18T19:55:44Z")
Hi Team, Please suggest.. Observing high CPU utilization on cluster node on one server and queried for nodes hot thread, Below is the response received please help. Because of high CPU, By search is slowing down i mean… --- ## [Increse performance of Logstash with multiple input](https://discuss.elastic.co/t/increse-performance-of-logstash-with-multiple-input/93910)
**Author:** [@Zeeshan\_Alam](https://discuss.elastic.co/u/Zeeshan_Alam)\ **Replies:** 1\ **Last updated:** [July 20, 2017, 12:00pm UTC](https://discuss.elastic.co/t/increse-performance-of-logstash-with-multiple-input/93910 "2017-07-20T12:00:57Z")
I am using Logstash to read from Kafka. My VM is having 6 processors. I looked at following two config: pipeline.workers: Default is Number of the host’s CPU cores The number of workers that will, in parallel, execu… --- ## [Getting the message Failed to update shard information for ClusterInfoUpdateJob in the es master logs](https://discuss.elastic.co/t/getting-the-message-failed-to-update-shard-information-for-clusterinfoupdatejob-in-the-es-master-logs/261274)
**Author:** [@prashant1](https://discuss.elastic.co/u/prashant1)\ **Replies:** 2\ **Last updated:** [January 18, 2021, 7:33am UTC](https://discuss.elastic.co/t/getting-the-message-failed-to-update-shard-information-for-clusterinfoupdatejob-in-the-es-master-logs/261274 "2021-01-18T07:33:18Z")
We are using elasticsearch 7.8.0 on centos 7. There are three data pods in the cluster we are restarting one of the data pod. Suddenly, elasticsearch curl to service stopped working and the following error observes in th… --- ## [Controls and Vega-Lite do not work AND Interactive Vega-Lite do not work to full extent](https://discuss.elastic.co/t/controls-and-vega-lite-do-not-work-and-interactive-vega-lite-do-not-work-to-full-extent/180949)
**Author:** [@LjupchoStefanov](https://discuss.elastic.co/u/LjupchoStefanov)\ **Replies:** 2\ **Last updated:** [May 15, 2019, 10:54am UTC](https://discuss.elastic.co/t/controls-and-vega-lite-do-not-work-and-interactive-vega-lite-do-not-work-to-full-extent/180949 "2019-05-15T10:54:56Z")
Kibana version: 6.7.0 Elasticsearch version: 6.7.0 Original install method (e.g. download page, yum, from source, etc.): docker Information about experience and what I am trying to achive (Controls and Vega-Lite): I w… --- ## [Kibana no documents in index showing in discover](https://discuss.elastic.co/t/kibana-no-documents-in-index-showing-in-discover/153440)
**Author:** [@atom](https://discuss.elastic.co/u/atom)\ **Replies:** 2\ **Last updated:** [October 23, 2018, 7:40am UTC](https://discuss.elastic.co/t/kibana-no-documents-in-index-showing-in-discover/153440 "2018-10-23T07:40:06Z")
Hi, there is a strange behaviour i have observed a few times on completely different Elastic-Stack hosts. Sometimes, i am putting data into an index. I can see that this index is getting the data if i execute a match\_a… --- ## [\[BUG\] Incorrect disk usage statistics](https://discuss.elastic.co/t/bug-incorrect-disk-usage-statistics/103207)
**Author:** [@hogarthj](https://discuss.elastic.co/u/hogarthj)\ **Replies:** 2\ **Last updated:** [November 1, 2017, 8:06pm UTC](https://discuss.elastic.co/t/bug-incorrect-disk-usage-statistics/103207 "2017-11-01T20:06:18Z")
Using metricbeat-5.6.0-1 on RHEL6 with a 5.6 ELK stack, The metrics returned for system.filesystem.used.pct are incorrect. The sigar go library returns the raw results of statfs and the metricbeat code just turns that … --- ## [Find large messages](https://discuss.elastic.co/t/find-large-messages/50247)
**Author:** [@jchen](https://discuss.elastic.co/u/jchen)\ **Replies:** 2\ **Last updated:** [May 31, 2016, 11:22pm UTC](https://discuss.elastic.co/t/find-large-messages/50247 "2016-05-31T23:22:15Z")
Is there an easy way to figure how the messages being put into ES based on their size? We are seeing a sudden increase in the storage space consumed and believe it's related continuous large messages being dumped into th… --- ## [How to filter windows events logs events with newlines](https://discuss.elastic.co/t/how-to-filter-windows-events-logs-events-with-newlines/44245)
**Author:** [@s802645](https://discuss.elastic.co/u/s802645)\ **Replies:** 2\ **Last updated:** [March 19, 2016, 5:02am UTC](https://discuss.elastic.co/t/how-to-filter-windows-events-logs-events-with-newlines/44245 "2016-03-19T05:02:39Z")
Hi, I received windows events from another source in this format: EventCode=1234 EvenType= blah blah User=me Message= key1:value1 arbitrarty .... Each event entry that comes into log stash has a newline. I j… --- ## [Partial update to a document with java api](https://discuss.elastic.co/t/partial-update-to-a-document-with-java-api/22511)
**Author:** [@Jakub\_Stransky](https://discuss.elastic.co/u/Jakub_Stransky)\ **Replies:** 2\ **Last updated:** [March 5, 2015, 9:13am UTC](https://discuss.elastic.co/t/partial-update-to-a-document-with-java-api/22511 "2015-03-05T09:13:06Z")
Hello, I am new to elasticsearch and I am trying to update just a portion of the document via java api. From the rest client e.g. I am successfull but I am really struggling with java api - UpdateRequest. I am upd… --- ## [If statement to check if difference between two values is greater than number](https://discuss.elastic.co/t/if-statement-to-check-if-difference-between-two-values-is-greater-than-number/174432)
**Author:** [@greengeek](https://discuss.elastic.co/u/greengeek)\ **Replies:** 5\ **Last updated:** [March 29, 2019, 5:06pm UTC](https://discuss.elastic.co/t/if-statement-to-check-if-difference-between-two-values-is-greater-than-number/174432 "2019-03-29T17:06:03Z")
I have two fields that are epoch timestamps. I want to take the first field and subtract the second field. If the results are larger than a certain number, I want to write a value into a new field. Basically an IF sta… [Previous page](https://discuss.elastic.co/top.md?page=1071&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1073&per_page=50&period=all)