# Top **URL:** https://discuss.elastic.co/top.md?page=108&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 109 --- ## [Can I have separate apm index log for each of my application](https://discuss.elastic.co/t/can-i-have-separate-apm-index-log-for-each-of-my-application/330692)
**Author:** [@JasonREC](https://discuss.elastic.co/u/JasonREC)\ **Replies:** 15\ **Last updated:** [May 25, 2023, 2:35pm UTC](https://discuss.elastic.co/t/can-i-have-separate-apm-index-log-for-each-of-my-application/330692 "2023-05-25T14:35:19Z")
I currently have 2 nodejs and 1 php app, and all of them are using the same apm server url and token to set up the apm agent. In Kibana discover, I found out there is a index pattern called "traces-apm\*,apm-,logs-apm,ap… --- ## [Missing Elastic Security and endpoint integration data](https://discuss.elastic.co/t/missing-elastic-security-and-endpoint-integration-data/246601)
**Author:** [@OntheHighSeas](https://discuss.elastic.co/u/OntheHighSeas)\ **Replies:** 15\ **Last updated:** [September 9, 2020, 4:16pm UTC](https://discuss.elastic.co/t/missing-elastic-security-and-endpoint-integration-data/246601 "2020-09-09T16:16:58Z")
Hi Team. Great work with the continued developments of Elastic, love the product. So I've upgraded to v7.9 and eager to test out the new Elastic Agent/Endpoint etc. I've enrolled a test agent insecurely, i.e. -i and t… --- ## [Elasticsearch shard unassigned and changed to red](https://discuss.elastic.co/t/elasticsearch-shard-unassigned-and-changed-to-red/137729)
**Author:** [@devika\_sudheer](https://discuss.elastic.co/u/devika_sudheer)\ **Replies:** 15\ **Last updated:** [June 30, 2018, 5:58am UTC](https://discuss.elastic.co/t/elasticsearch-shard-unassigned-and-changed-to-red/137729 "2018-06-30T05:58:44Z")
Hi I am using logstash to ship my log data to es, the index is created in the format log-YYYY-mm-dd. It was running fine for 4-5 hours and then the shards failed, turned red, in log its written Engine failed\[merge faile… --- ## [Converting a number for use in geo-point](https://discuss.elastic.co/t/converting-a-number-for-use-in-geo-point/95252)
**Author:** [@elaair](https://discuss.elastic.co/u/elaair)\ **Replies:** 9\ **Last updated:** [August 1, 2017, 4:08pm UTC](https://discuss.elastic.co/t/converting-a-number-for-use-in-geo-point/95252 "2017-08-01T16:08:37Z")
I have data that contains src\_latitude, src\_longitude, dst\_latitiude, and dst\_longitude. Some of the data is zero which seems to throw off elastic. \[2017-07-31T15:17:54,787\]\[DEBUG\]\[o.e.a.b.TransportShardBulkAction\] \[UzW… --- ## [Regular expression problem](https://discuss.elastic.co/t/regular-expression-problem/26484)
**Author:** [@simonrisberg](https://discuss.elastic.co/u/simonrisberg)\ **Replies:** 11\ **Last updated:** [July 31, 2015, 6:07pm UTC](https://discuss.elastic.co/t/regular-expression-problem/26484 "2015-07-31T18:07:21Z")
Hi! I'm trying to make a regular expression to get out a certain word from a URIPATH that is not actually in the parh itself. So far I've actually managed to do that although when I put it into my logstash configurati… --- ## [High CPU Load on only some of the machines in a cluster](https://discuss.elastic.co/t/high-cpu-load-on-only-some-of-the-machines-in-a-cluster/6751)
**Author:** [@Chris\_Rode](https://discuss.elastic.co/u/Chris_Rode)\ **Replies:** 13\ **Last updated:** [February 29, 2012, 12:55pm UTC](https://discuss.elastic.co/t/high-cpu-load-on-only-some-of-the-machines-in-a-cluster/6751 "2012-02-29T12:55:06Z")
Hi all I have not been able to find anything to explain why this may be occurring.. We have a cluster of 7 nodes on ephemeral EC2 with an S3 gateway set to 10 minutes. When we put the cluster under load though, o… --- ## [Bypassing failing bootstrap checks](https://discuss.elastic.co/t/bypassing-failing-bootstrap-checks/105777)
**Author:** [@akpt](https://discuss.elastic.co/u/akpt)\ **Replies:** 12\ **Last updated:** [October 30, 2017, 8:52pm UTC](https://discuss.elastic.co/t/bypassing-failing-bootstrap-checks/105777 "2017-10-30T20:52:44Z")
I am trying to run 3 elasticsearch masters on a single node cluster but am having issues regarding the virtual memory setting. Everything seems to be running fine locally if I create the cluster/masters after first using… --- ## [Why is only one node processing the query?](https://discuss.elastic.co/t/why-is-only-one-node-processing-the-query/275070)
**Author:** [@Aurel\_Drejta](https://discuss.elastic.co/u/Aurel_Drejta)\ **Replies:** 11\ **Last updated:** [July 6, 2021, 11:23pm UTC](https://discuss.elastic.co/t/why-is-only-one-node-processing-the-query/275070 "2021-07-06T23:23:35Z")
Hi everyone. I had an index that had 5 primary shards and around 250GB of data in total (primaries only). I decided to reindex it with more primary shards (30) to see if I would have performance improvements. The index … --- ## [Rollover Policy Not reacting to Number of Docs](https://discuss.elastic.co/t/rollover-policy-not-reacting-to-number-of-docs/212213)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 13\ **Last updated:** [December 20, 2019, 7:35pm UTC](https://discuss.elastic.co/t/rollover-policy-not-reacting-to-number-of-docs/212213 "2019-12-20T19:35:13Z")
We have an index lifecycle policy which we have set to maxdocs=5 just to see what happens. { "dev-policy": { "version": 2, "modified\_date": "2019-12-17T10:14:34.142Z", "policy": { … --- ## [Remove packetbeat references form libbeat](https://discuss.elastic.co/t/remove-packetbeat-references-form-libbeat/27829)
**Author:** [@ruflin](https://discuss.elastic.co/u/ruflin)\ **Replies:** 11\ **Last updated:** [August 28, 2015, 11:17am UTC](https://discuss.elastic.co/t/remove-packetbeat-references-form-libbeat/27829 "2015-08-28T11:17:47Z")
As packetbeat was the first beat, there are still quite a few references in the libbeat library. The most obvious one is that the fallback elasticsearch index is called packetbeat. So for example for topbeat, the index p… --- ## [Elastisearch installation](https://discuss.elastic.co/t/elastisearch-installation/297341)
**Author:** [@Abhi\_Abhishek](https://discuss.elastic.co/u/Abhi_Abhishek)\ **Replies:** 18\ **Last updated:** [February 17, 2022, 3:43pm UTC](https://discuss.elastic.co/t/elastisearch-installation/297341 "2022-02-17T15:43:10Z")
Hello Greetings of the day, I am trying to install Elasticsearch in linux server but its not installing & throwing error & logs are also not generating in var/log/Elasticsearch. Elasticsearch status: journalctl -x… --- ## [How to define index name for kibana index pattern](https://discuss.elastic.co/t/how-to-define-index-name-for-kibana-index-pattern/66614)
**Author:** [@student975](https://discuss.elastic.co/u/student975)\ **Replies:** 9\ **Last updated:** [November 20, 2016, 10:07am UTC](https://discuss.elastic.co/t/how-to-define-index-name-for-kibana-index-pattern/66614 "2016-11-20T10:07:58Z")
Hi! How to define index name in multi-ls-on-hosts -\> rabbit -\> ls -\> kibana chain to be further used in kibana index pattern? --- ## [Cluster replication](https://discuss.elastic.co/t/cluster-replication/25288)
**Author:** [@rabeetwaqar](https://discuss.elastic.co/u/rabeetwaqar)\ **Replies:** 13\ **Last updated:** [July 14, 2015, 7:21am UTC](https://discuss.elastic.co/t/cluster-replication/25288 "2015-07-14T07:21:07Z")
Hi, Is it possible to create the replica of whole cluster? Thanks --- ## [The content of the field is not shown in alert](https://discuss.elastic.co/t/the-content-of-the-field-is-not-shown-in-alert/309637)
**Author:** [@csaba.g](https://discuss.elastic.co/u/csaba.g)\ **Replies:** 10\ **Last updated:** [July 22, 2022, 9:21am UTC](https://discuss.elastic.co/t/the-content-of-the-field-is-not-shown-in-alert/309637 "2022-07-22T09:21:50Z")
Hello, I defined an Alert Rule with Connector email. I would like to have in the received email the particular message, for which we defined the condition. The field which I would like to see is message. I tried differe… --- ## [Java, Spring Boot 3.1.1 - The attached APM agent doesn't separate KafkaListeners and Scheduled tasks to separate transactions](https://discuss.elastic.co/t/java-spring-boot-3-1-1-the-attached-apm-agent-doesnt-separate-kafkalisteners-and-scheduled-tasks-to-separate-transactions/338764)
**Author:** [@SerhiiM](https://discuss.elastic.co/u/SerhiiM)\ **Replies:** 20\ **Last updated:** [August 3, 2023, 10:03am UTC](https://discuss.elastic.co/t/java-spring-boot-3-1-1-the-attached-apm-agent-doesnt-separate-kafkalisteners-and-scheduled-tasks-to-separate-transactions/338764 "2023-08-03T10:03:18Z")
Kibana version: docker.elastic.co/kibana/kibana:8.7.0 Elasticsearch version: docker.elastic.co/elasticsearch/elasticsearch:8.7.0 APM Server version: docker.elastic.co/apm/apm-server:8.7.0 APM Agent language and versio… --- ## [Stuck "Cancelled Tasks" In ElasticSearch 8.6.2 causing Cluster failure](https://discuss.elastic.co/t/stuck-cancelled-tasks-in-elasticsearch-8-6-2-causing-cluster-failure/337490)
**Author:** [@Thomas\_Kuisel](https://discuss.elastic.co/u/Thomas_Kuisel)\ **Replies:** 18\ **Last updated:** [July 11, 2023, 4:27pm UTC](https://discuss.elastic.co/t/stuck-cancelled-tasks-in-elasticsearch-8-6-2-causing-cluster-failure/337490 "2023-07-11T16:27:41Z")
Hi - We are using Elasticsearch 8.6.2 running on Azure AKS and noticed some serious issues lately. As of last week the week of Jun30 2023, we started noticing huge unresolved search transport queues in our cluster. The… --- ## [Parsing web hook data in logstash](https://discuss.elastic.co/t/parsing-web-hook-data-in-logstash/145224)
**Author:** [@iamlearner123](https://discuss.elastic.co/u/iamlearner123)\ **Replies:** 10\ **Last updated:** [August 27, 2018, 8:00pm UTC](https://discuss.elastic.co/t/parsing-web-hook-data-in-logstash/145224 "2018-08-27T20:00:08Z")
Hello, I am bringing the data thru webhook into logstash but can i please know how the parse that data and send it to separate index. I have provided the http://logstashIp/\_hooks/gitlab in the gitlab webhook section… --- ## [How to run logstash service in the background?](https://discuss.elastic.co/t/how-to-run-logstash-service-in-the-background/243645)
**Author:** [@evacch](https://discuss.elastic.co/u/evacch)\ **Replies:** 11\ **Last updated:** [August 7, 2020, 7:58am UTC](https://discuss.elastic.co/t/how-to-run-logstash-service-in-the-background/243645 "2020-08-07T07:58:16Z")
I installed and configured ELK in a CentOS environment. I have been using the following command to run logstash in the foreground and it works perfectly. ./usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/logst… --- ## [Size limitation](https://discuss.elastic.co/t/size-limitation/224696)
**Author:** [@wadhah](https://discuss.elastic.co/u/wadhah)\ **Replies:** 9\ **Last updated:** [April 23, 2020, 12:00pm UTC](https://discuss.elastic.co/t/size-limitation/224696 "2020-04-23T12:00:46Z")
Hello, essql query=" SELECT Costs FROM \\"test\*\\" " | math "round(sum(costs),2)" | metric "€" | render I am trying to run the above query, however it i… --- ## [Which is the best way to sort data in elastic search](https://discuss.elastic.co/t/which-is-the-best-way-to-sort-data-in-elastic-search/123537)
**Author:** [@sunilkumar](https://discuss.elastic.co/u/sunilkumar)\ **Replies:** 20\ **Last updated:** [March 14, 2018, 8:34am UTC](https://discuss.elastic.co/t/which-is-the-best-way-to-sort-data-in-elastic-search/123537 "2018-03-14T08:34:17Z")
"sort" : \[ { "@timestamp" : {"order" : "asc"}} \] When i use timestamp to sort data in order,if 2 datas have the same timestamp i'm not able to get the data in logstash processed order.plz help --- ## [Geoip.location](https://discuss.elastic.co/t/geoip-location/95632)
**Author:** [@elaair](https://discuss.elastic.co/u/elaair)\ **Replies:** 12\ **Last updated:** [August 5, 2017, 3:59am UTC](https://discuss.elastic.co/t/geoip-location/95632 "2017-08-05T03:59:35Z")
If geoip.location appears in the index as a geo\_point, why am I unable to use it in a heat map? Also, why do geoip.longitude and geoip.latitude appear as numbers? Shouldn’t they by default be float? I have a mapping lik… --- ## [Elasticsearch not reassigning shards after node rejoined](https://discuss.elastic.co/t/elasticsearch-not-reassigning-shards-after-node-rejoined/178424)
**Author:** [@rsyne](https://discuss.elastic.co/u/rsyne)\ **Replies:** 23\ **Last updated:** [May 14, 2019, 9:14am UTC](https://discuss.elastic.co/t/elasticsearch-not-reassigning-shards-after-node-rejoined/178424 "2019-05-14T09:14:46Z")
Hi My cluster (running Elasticsearch 6.4.3) consists of three nodes running on seperate VMs. One VM crashed. After it was brought back to life, the node rejoined the cluster, but shards reassignment did not start. CPU u… --- ## [How to ingest a log file from source system to Kibana through Filebeat](https://discuss.elastic.co/t/how-to-ingest-a-log-file-from-source-system-to-kibana-through-filebeat/315544)
**Author:** [@cadrija](https://discuss.elastic.co/u/cadrija)\ **Replies:** 15\ **Last updated:** [November 10, 2022, 5:50am UTC](https://discuss.elastic.co/t/how-to-ingest-a-log-file-from-source-system-to-kibana-through-filebeat/315544 "2022-11-10T05:50:26Z")
Hi experts! I am new to elastic. I have installed ELK (7.17.6) on a Ubuntu system (suppose u.u.u.u). Now I am trying to fetch/ingest a log file from a windows system (suppose w.w.w.w). Steps I followed leaning from tut… --- ## [Dynamic naming of elasticsearch data-streams](https://discuss.elastic.co/t/dynamic-naming-of-elasticsearch-data-streams/325278)
**Author:** [@sbocquet](https://discuss.elastic.co/u/sbocquet)\ **Replies:** 12\ **Last updated:** [February 28, 2023, 3:22pm UTC](https://discuss.elastic.co/t/dynamic-naming-of-elasticsearch-data-streams/325278 "2023-02-28T15:22:30Z")
Hi, I'm trying to have some dynamic naming for my data streams based on some syslog fields. Here is my rsyslog conf file for sending datas in JSON format to logstash. # cat logstash-json.conf template(name="json-templ… --- ## [Cant get Elasticsearch to start on first install](https://discuss.elastic.co/t/cant-get-elasticsearch-to-start-on-first-install/170208)
**Author:** [@mrsanders](https://discuss.elastic.co/u/mrsanders)\ **Replies:** 9\ **Last updated:** [February 28, 2019, 8:08pm UTC](https://discuss.elastic.co/t/cant-get-elasticsearch-to-start-on-first-install/170208 "2019-02-28T20:08:52Z")
Doing an initial install of ES on a windows virtual machine. Have installed latest version of java jdk on c drive, and did the zip install of ES on the E drive. When i try to run the elasticsearch.bat file i get this: … --- ## [\[node1\] failed to reconnect to node \[node1\]](https://discuss.elastic.co/t/node1-failed-to-reconnect-to-node-node1/22959)
**Author:** [@Azman\_Ahmad](https://discuss.elastic.co/u/Azman_Ahmad)\ **Replies:** 11\ **Last updated:** [March 30, 2015, 3:42pm UTC](https://discuss.elastic.co/t/node1-failed-to-reconnect-to-node-node1/22959 "2015-03-30T15:42:11Z")
Both nodes running on AWS. Both sides pingbles and curlable. Had check resolution in this forum but the case is not similar at all. Badly need help as project meeting dateline. Please.... yml setting. network.p… --- ## [How can I delete all the duplicate records except one to keep my data?](https://discuss.elastic.co/t/how-can-i-delete-all-the-duplicate-records-except-one-to-keep-my-data/218553)
**Author:** [@arhneim](https://discuss.elastic.co/u/arhneim)\ **Replies:** 12\ **Last updated:** [February 10, 2020, 2:54pm UTC](https://discuss.elastic.co/t/how-can-i-delete-all-the-duplicate-records-except-one-to-keep-my-data/218553 "2020-02-10T14:54:58Z")
Hello I'm new to ElasticSearch. The project I'm going to show you here is a study project. I could use your help to deduplicate records that have been registered 10 times during half a day. I tried different things tha… --- ## [Kibana source installation error](https://discuss.elastic.co/t/kibana-source-installation-error/83986)
**Author:** [@sravya](https://discuss.elastic.co/u/sravya)\ **Replies:** 11\ **Last updated:** [June 7, 2017, 10:19am UTC](https://discuss.elastic.co/t/kibana-source-installation-error/83986 "2017-06-07T10:19:43Z")
git clone https://github.com/root/kibana.git kibana Initialized empty Git repository in /opt/kibana/.git/ error: Couldn't resolve host 'github.com' while accessing https://github.com/root/kibana.git/info/refs fatal: H… --- ## [Default Index pattern not found?](https://discuss.elastic.co/t/default-index-pattern-not-found/132126)
**Author:** [@NotPete](https://discuss.elastic.co/u/NotPete)\ **Replies:** 9\ **Last updated:** [May 18, 2018, 1:34pm UTC](https://discuss.elastic.co/t/default-index-pattern-not-found/132126 "2018-05-18T13:34:43Z")
Hello Everyone, I am still new to ELK Stack so please be gentle :slight\_smile: I have all components "working" without error now, however, when I go to Kibana it says "No default index pattern. You must select or creat… --- ## [GIT Pipelines Integration](https://discuss.elastic.co/t/git-pipelines-integration/101121)
**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\ **Replies:** 11\ **Last updated:** [September 27, 2017, 12:04pm UTC](https://discuss.elastic.co/t/git-pipelines-integration/101121 "2017-09-27T12:04:04Z")
Hi - We are trying to integrate with GIT CI/CD with ELK , I'd like to pull the Pipelines job status and send it to Elastic Search and then display it on the dashboard. Would somone please provide your comments on this. … --- ## [Unstable response-timing App Search](https://discuss.elastic.co/t/unstable-response-timing-app-search/309383)
**Author:** [@SanderP](https://discuss.elastic.co/u/SanderP)\ **Replies:** 11\ **Last updated:** [August 17, 2022, 1:04pm UTC](https://discuss.elastic.co/t/unstable-response-timing-app-search/309383 "2022-08-17T13:04:28Z")
Dear all, I'm looking into the performance of App Search and am noticing that this is not stable. The response-time of a identical request ranges from 200ms towards 1000+ ms. How could this be made more stable to around… --- ## [Sflow plugin dont work](https://discuss.elastic.co/t/sflow-plugin-dont-work/233469)
**Author:** [@ahiyaz](https://discuss.elastic.co/u/ahiyaz)\ **Replies:** 9\ **Last updated:** [May 20, 2020, 3:14pm UTC](https://discuss.elastic.co/t/sflow-plugin-dont-work/233469 "2020-05-20T15:14:50Z")
hi im new here just install logstash as shipper toward Logz.io ive install the sflow input plugin but i dont see logstash listening in any port. i have filebeat installed on this agent as well for syslog collecting. … --- ## [Could not load FFI Provider: (NotImplementedError) FFI not available: null](https://discuss.elastic.co/t/could-not-load-ffi-provider-notimplementederror-ffi-not-available-null/363551)
**Author:** [@rohit\_dhiman](https://discuss.elastic.co/u/rohit_dhiman)\ **Replies:** 12\ **Last updated:** [June 18, 2025, 5:02pm UTC](https://discuss.elastic.co/t/could-not-load-ffi-provider-notimplementederror-ffi-not-available-null/363551 "2025-06-18T17:02:21Z")
1. Logstash version: 8.3.2 2. Logstash installation source: RPM 3. Running logstash by executing below command inside directory /usr/share/logstash/bin ./logstash -f /etc/logstash/conf.d/app-uat-vl… --- ## [Failed to set monitoring pipeline \[xpack\_monitoring\_2\] And process cluster event (put-pipeline-xpack\_monitoring\_2)](https://discuss.elastic.co/t/failed-to-set-monitoring-pipeline-xpack-monitoring-2-and-process-cluster-event-put-pipeline-xpack-monitoring-2/265754)
**Author:** [@MdRashid](https://discuss.elastic.co/u/MdRashid)\ **Replies:** 12\ **Last updated:** [March 4, 2021, 4:13pm UTC](https://discuss.elastic.co/t/failed-to-set-monitoring-pipeline-xpack-monitoring-2-and-process-cluster-event-put-pipeline-xpack-monitoring-2/265754 "2021-03-04T16:13:36Z")
Hi All, Below is the Error im getting in Elasticsearch container logs 'failed to set monitoring pipeline \[xpack\_monitoring\_2\] Org.elasticsearch.cluster.metadata.ProcessClusterEventTimeoutException: failed to process c… --- ## [Ubuntu Elastic Search copy the data folder not working](https://discuss.elastic.co/t/ubuntu-elastic-search-copy-the-data-folder-not-working/87431)
**Author:** [@PrabakarKaruppasamy](https://discuss.elastic.co/u/PrabakarKaruppasamy)\ **Replies:** 12\ **Last updated:** [May 29, 2017, 12:23pm UTC](https://discuss.elastic.co/t/ubuntu-elastic-search-copy-the-data-folder-not-working/87431 "2017-05-29T12:23:00Z")
Hi am copying the entire data folder from windows elastic search server to Ubuntu elastic search server. But it is not working.. It is not showing the indexes in Kibana. Any help should be appreciated. Thanks in adva… --- ## [Unwanted truncating of multiline message](https://discuss.elastic.co/t/unwanted-truncating-of-multiline-message/206872)
**Author:** [@Bhozar](https://discuss.elastic.co/u/Bhozar)\ **Replies:** 9\ **Last updated:** [November 29, 2019, 10:15pm UTC](https://discuss.elastic.co/t/unwanted-truncating-of-multiline-message/206872 "2019-11-29T22:15:46Z")
I'm having an issue with an XML log file being ingested by Filebeat and some of the messages being passed onto Logstash with the opening tag truncated. There's no pattern to the failures that I can spot and works 95% of … --- ## [Spark sql pushdown conjunction filters](https://discuss.elastic.co/t/spark-sql-pushdown-conjunction-filters/35324)
**Author:** [@joris\_renkens](https://discuss.elastic.co/u/joris_renkens)\ **Replies:** 9\ **Last updated:** [January 9, 2016, 1:07pm UTC](https://discuss.elastic.co/t/spark-sql-pushdown-conjunction-filters/35324 "2016-01-09T13:07:56Z")
Hi, I'm trying to use elasticsearch as a data source for a spark script. Everything works fine but when I use a conjunctive filter: data.filter(data("user").equalTo("foo").and(data("start").lt("2015-10-25 01:00:000… --- ## [Graph explore api for webshop case](https://discuss.elastic.co/t/graph-explore-api-for-webshop-case/99582)
**Author:** [@Malthe](https://discuss.elastic.co/u/Malthe)\ **Replies:** 12\ **Last updated:** [October 20, 2017, 7:40am UTC](https://discuss.elastic.co/t/graph-explore-api-for-webshop-case/99582 "2017-10-20T07:40:42Z")
Hi Elasticsearch community. I am trying to build a feature with the Explore api, which can tell what other people bought after they have looked at, whatever product you are currently looking at. I have indexed in ES th… --- ## [Grok on multiple continues lines](https://discuss.elastic.co/t/grok-on-multiple-continues-lines/73970)
**Author:** [@Govind\_Raj](https://discuss.elastic.co/u/Govind_Raj)\ **Replies:** 18\ **Last updated:** [February 16, 2017, 7:07am UTC](https://discuss.elastic.co/t/grok-on-multiple-continues-lines/73970 "2017-02-16T07:07:08Z")
Hi We have a pattern as follows, if the application works fine then not more 1 occurance of following log line will be present, 2017-02-04 17:25:21 20713 20:25:21.251 timeman(170) Note: NtpdateWrapper:: StartNt… --- ## [Elastic-apm-node memory leak](https://discuss.elastic.co/t/elastic-apm-node-memory-leak/179245)
**Author:** [@sammaxwell](https://discuss.elastic.co/u/sammaxwell)\ **Replies:** 11\ **Last updated:** [May 7, 2019, 11:40pm UTC](https://discuss.elastic.co/t/elastic-apm-node-memory-leak/179245 "2019-05-07T23:40:08Z")
Ever since I incorporated APM (elastic-apm-node) in some nodejs microservices they have developed memory leaks. I have a small repo that shows a couple strange things that might be related... You will need a MS Sql S… --- ## [Transport errors between elasticsearch nodes](https://discuss.elastic.co/t/transport-errors-between-elasticsearch-nodes/336685)
**Author:** [@Josselin](https://discuss.elastic.co/u/Josselin)\ **Replies:** 10\ **Last updated:** [August 12, 2023, 5:38am UTC](https://discuss.elastic.co/t/transport-errors-between-elasticsearch-nodes/336685 "2023-08-12T05:38:57Z")
Hi ! I am creating this topic to seek help about a major issues on our Elasticsearch cluster. We have a cluster with nearly 150 nodes (quite a bit :wink: ) We are sometime encountering a big issues, some nodes start t… --- ## [Packetbeat 7.1 and Geoip setup](https://discuss.elastic.co/t/packetbeat-7-1-and-geoip-setup/182510)
**Author:** [@Marcell0e](https://discuss.elastic.co/u/Marcell0e)\ **Replies:** 31\ **Last updated:** [June 3, 2019, 5:32pm UTC](https://discuss.elastic.co/t/packetbeat-7-1-and-geoip-setup/182510 "2019-06-03T17:32:25Z")
I am really new to Elasticsearch and all the components. I am trying to use the GeoIp with Packetbeat 7.1 and I can't figure out how to make it work. I am trying to use the following documentation. None of the Geo fie… --- ## [Can't change index field mapping to geo\_ip](https://discuss.elastic.co/t/cant-change-index-field-mapping-to-geo-ip/74491)
**Author:** [@jonasv](https://discuss.elastic.co/u/jonasv)\ **Replies:** 13\ **Last updated:** [February 9, 2017, 5:44pm UTC](https://discuss.elastic.co/t/cant-change-index-field-mapping-to-geo-ip/74491 "2017-02-09T17:44:39Z")
Hi, I'm trying to get Kibana tile map get working, basically I'm after changing geoip.location field type to geo\_ip . This is my index file: { "fedora26-2017.02.09": { "aliases": {}, "mappings": { "ng… --- ## [Could not find or load main class "-](https://discuss.elastic.co/t/could-not-find-or-load-main-class/311307)
**Author:** [@AULIA\_KHOIRUN\_NISA\_N](https://discuss.elastic.co/u/AULIA_KHOIRUN_NISA_N)\ **Replies:** 10\ **Last updated:** [August 4, 2022, 9:39am UTC](https://discuss.elastic.co/t/could-not-find-or-load-main-class/311307 "2022-08-04T09:39:04Z")
''' can anybody help me, cause I'm trying to start elasticsearch bu it did't work Job for elasticsearch.service failed because the control process exited with error code. See "systemctl status elasticsearch.service" and… --- ## [Improve indexing throughput in Elasticsearch](https://discuss.elastic.co/t/improve-indexing-throughput-in-elasticsearch/88736)
**Author:** [@elk\_user1](https://discuss.elastic.co/u/elk_user1)\ **Replies:** 10\ **Last updated:** [June 9, 2017, 9:58am UTC](https://discuss.elastic.co/t/improve-indexing-throughput-in-elasticsearch/88736 "2017-06-09T09:58:28Z")
Hi Team, I am using kafka connector to load data from kafka topic into an elasticsearch index. Throughput into kafka topic is around 2000 requests per seconds. But throughput at elasticsearch is quite lower like around… --- ## [MySQL module: Configuration](https://discuss.elastic.co/t/mysql-module-configuration/229299)
**Author:** [@Md\_Saidur\_Rahman](https://discuss.elastic.co/u/Md_Saidur_Rahman)\ **Replies:** 22\ **Last updated:** [May 6, 2020, 8:31pm UTC](https://discuss.elastic.co/t/mysql-module-configuration/229299 "2020-05-06T20:31:39Z")
I've configured mysql moduld for MariaDB but didn't get any log in kibana dashboard. Configuration and Dashboards attached bellow: MySQL module configuration: module: mysql #metricsets: status galera\_status period:… --- ## [Why does matchAll query so slowly?](https://discuss.elastic.co/t/why-does-matchall-query-so-slowly/69764)
**Author:** [@hubo3085632](https://discuss.elastic.co/u/hubo3085632)\ **Replies:** 17\ **Last updated:** [January 9, 2017, 6:17am UTC](https://discuss.elastic.co/t/why-does-matchall-query-so-slowly/69764 "2017-01-09T06:17:04Z")
hi all ,I want to use matchAll to achieve a query which same as the sql 'select top xxx from tab' in rdbms.But i find it does slowly,is there has another appropriate function to achieve my purpose? --- ## [Everything is broken after upgrade to 7.11](https://discuss.elastic.co/t/everything-is-broken-after-upgrade-to-7-11/263973)
**Author:** [@hermlam](https://discuss.elastic.co/u/hermlam)\ **Replies:** 14\ **Last updated:** [February 18, 2021, 4:17pm UTC](https://discuss.elastic.co/t/everything-is-broken-after-upgrade-to-7-11/263973 "2021-02-18T16:17:44Z")
After upgrade to 7.11 everything is broken: -Elastic-agent in Fleet stopped every agent; -Stack management won't open; -Trying to read logs in Discover gives an error: 'Wrapper@https://2e233a9cadac49f5b5e52ee324f8e04… --- ## [Advice needed for searching: filters vrs. queries](https://discuss.elastic.co/t/advice-needed-for-searching-filters-vrs-queries/11141)
**Author:** [@brian\_yoder](https://discuss.elastic.co/u/brian_yoder)\ **Replies:** 16\ **Last updated:** [March 19, 2013, 11:29am UTC](https://discuss.elastic.co/t/advice-needed-for-searching-filters-vrs-queries/11141 "2013-03-19T11:29:34Z")
I currently implement all my production application client queries directly in Java, and use a BoolQueryBuilder to wrap all of my indexed field queries. I currently only use a filter for geo distance queries. The t… --- ## [Ruby help with array of json objects](https://discuss.elastic.co/t/ruby-help-with-array-of-json-objects/241022)
**Author:** [@rajsolanki](https://discuss.elastic.co/u/rajsolanki)\ **Replies:** 14\ **Last updated:** [July 13, 2020, 7:42pm UTC](https://discuss.elastic.co/t/ruby-help-with-array-of-json-objects/241022 "2020-07-13T19:42:52Z")
hi sorry if its repeat question. In my document there are few fields which are array of json objects. I want to extract one of json array object's value and assign it to my new field. So for that i m using ruby code t… [Previous page](https://discuss.elastic.co/top.md?page=107&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=109&per_page=50&period=all)