# Top

**URL:** https://discuss.elastic.co/top.md?page=1081&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1082

---

## [How to establish secured connection to elasticsearch](https://discuss.elastic.co/t/how-to-establish-secured-connection-to-elasticsearch/167783)

<div class="topic-metadata">

**Author:** [@li\_jessen2016](https://discuss.elastic.co/u/li_jessen2016)\
**Replies:** 4\
**Last updated:** [February 16, 2019, 7:39am UTC](https://discuss.elastic.co/t/how-to-establish-secured-connection-to-elasticsearch/167783 "2019-02-16T07:39:52Z")

</div>

I am following the instructions on the "Getting Started with Elasticsearch" video, in which the Kibana connects to Elasticsearch with no security enabled. But if Elasticsearch enabled security features, how to connect t…

---

## [The best practice to nest a hash?](https://discuss.elastic.co/t/the-best-practice-to-nest-a-hash/91373)

<div class="topic-metadata">

**Author:** [@lucianspec](https://discuss.elastic.co/u/lucianspec)\
**Replies:** 4\
**Last updated:** [June 30, 2017, 9:20am UTC](https://discuss.elastic.co/t/the-best-practice-to-nest-a-hash/91373 "2017-06-30T09:20:01Z")

</div>

my event data like this... "thread" =\> "Thread-74-\_\_system-executor\[-1 -1\]", "message" =\> "2017-06-19 16:46:12.750 o.a.s.d.executor Thread-74-\_\_system-executor\[-1 -1\] \[INFO\] Prepared bolt \_\_system:(-1)", "…

---

## [Kibana dashboards not saving for me in ElasticSearch](https://discuss.elastic.co/t/kibana-dashboards-not-saving-for-me-in-elasticsearch/21561)

<div class="topic-metadata">

**Author:** [@William\_Tarrant](https://discuss.elastic.co/u/William_Tarrant)\
**Replies:** 4\
**Last updated:** [January 10, 2015, 12:44pm UTC](https://discuss.elastic.co/t/kibana-dashboards-not-saving-for-me-in-elasticsearch/21561 "2015-01-10T12:44:22Z")

</div>

Hey, after a long day with no success I finally conceded that I need to ask for help. I am running ES 1.4 with kibana 3.1.2 hosted on ngnix both on the same machine (I have done the cors work around). Whenever I tr…

---

## [High Cpu in Idle State](https://discuss.elastic.co/t/high-cpu-in-idle-state/13443)

<div class="topic-metadata">

**Author:** [@mxol78](https://discuss.elastic.co/u/mxol78)\
**Replies:** 4\
**Last updated:** [September 6, 2013, 2:59pm UTC](https://discuss.elastic.co/t/high-cpu-in-idle-state/13443 "2013-09-06T14:59:09Z")

</div>

Hi, I have been testing elasticsearch and have found it to slowly start using 100% of cpu even when there are no queries taking place. There's only few documents getting bulk indexed after every 10 seconds. But elas…

---

## [Two index with same field cant be merged as single document](https://discuss.elastic.co/t/two-index-with-same-field-cant-be-merged-as-single-document/171845)

<div class="topic-metadata">

**Author:** [@Hari\_Krishnan](https://discuss.elastic.co/u/Hari_Krishnan)\
**Replies:** 6\
**Last updated:** [April 14, 2019, 12:54pm UTC](https://discuss.elastic.co/t/two-index-with-same-field-cant-be-merged-as-single-document/171845 "2019-04-14T12:54:19Z")

</div>

Hi i'm new to Kibana. I tried to merge two index into a single document but failed Here what i did: Created index as index11 and index12 Created index pattern as index1\* then in Discover tab i can see filed of two in…

---

## [HttpProf not works](https://discuss.elastic.co/t/httpprof-not-works/104236)

<div class="topic-metadata">

**Author:** [@baac7d8fd69f222caad0](https://discuss.elastic.co/u/baac7d8fd69f222caad0)\
**Replies:** 6\
**Last updated:** [October 24, 2017, 7:53am UTC](https://discuss.elastic.co/t/httpprof-not-works/104236 "2017-10-24T07:53:31Z")

</div>

I start the fileBeat like this： ./filebeat -c DataCenterCollecterAgent.yml -httpprof 127.0.0.1:6000 I use command to get FileBeat info like this: curl http:127.0.0.1:60000/debug/vars It returns: curl: (7) Failed to…

---

## [Continuous document?](https://discuss.elastic.co/t/continuous-document/37214)

<div class="topic-metadata">

**Author:** [@aviv.ratzon](https://discuss.elastic.co/u/aviv.ratzon)\
**Replies:** 6\
**Last updated:** [December 20, 2015, 5:02am UTC](https://discuss.elastic.co/t/continuous-document/37214 "2015-12-20T05:02:00Z")

</div>

Hello, summary: I am trying to find a way to have many "objects", and query their properties in certain time points. I'm having a problem implementing ELK and I need some advice. I have a database that a part of it i…

---

## [Unmapped, searchable JSON field](https://discuss.elastic.co/t/unmapped-searchable-json-field/6402)

<div class="topic-metadata">

**Author:** [@MarcusLongmuir](https://discuss.elastic.co/u/MarcusLongmuir)\
**Replies:** 6\
**Last updated:** [January 21, 2012, 12:03am UTC](https://discuss.elastic.co/t/unmapped-searchable-json-field/6402 "2012-01-21T00:03:17Z")

</div>

I'd like to be able to store JSON in a field of a document that is searchable as a string, but unmapped so that I can store any structure within this field without conflict. I've experimented with different mappings…

---

## [I can't send MongoDB data to Elasticseach via logstash](https://discuss.elastic.co/t/i-cant-send-mongodb-data-to-elasticseach-via-logstash/234976)

<div class="topic-metadata">

**Author:** [@FernandoMOTA](https://discuss.elastic.co/u/FernandoMOTA)\
**Replies:** 5\
**Last updated:** [June 1, 2020, 3:17pm UTC](https://discuss.elastic.co/t/i-cant-send-mongodb-data-to-elasticseach-via-logstash/234976 "2020-06-01T15:17:42Z")

</div>

My configuration file is as follows: input { mongodb { uri =\> 'mongodb://localhost:27017/exemplo' placeholder\_db\_dir =\> 'C:/Users/Administrator/Documents/Elastic/logstash-7.6.1/data/opt/logstash-mo…

---

## [\[Machine Learning Export\] - Ability to share Machine Learning data](https://discuss.elastic.co/t/machine-learning-export-ability-to-share-machine-learning-data/168094)

<div class="topic-metadata">

**Author:** [@etsai7](https://discuss.elastic.co/u/etsai7)\
**Replies:** 5\
**Last updated:** [February 14, 2019, 4:12pm UTC](https://discuss.elastic.co/t/machine-learning-export-ability-to-share-machine-learning-data/168094 "2019-02-14T16:12:13Z")

</div>

Hello, Is there a functionality to share the generated results from machine learning (either exporting the data or the Kibana UI) or any related posts to this topic? Thanks, Eric

---

## [Custom Plugin not found](https://discuss.elastic.co/t/custom-plugin-not-found/79565)

<div class="topic-metadata">

**Author:** [@ohk](https://discuss.elastic.co/u/ohk)\
**Replies:** 5\
**Last updated:** [April 3, 2017, 3:13pm UTC](https://discuss.elastic.co/t/custom-plugin-not-found/79565 "2017-04-03T15:13:03Z")

</div>

Im working this plugin to fetch logs from hdfs, this is the gemspec file: s.name = 'logstash-input-webhdfs' s.version = '0.1.0' s.licenses = \['Apache License (2.0)'\] s.summary = 'Write…

---

## [Specific timeout for forcemerge request](https://discuss.elastic.co/t/specific-timeout-for-forcemerge-request/231089)

<div class="topic-metadata">

**Author:** [@tombee74](https://discuss.elastic.co/u/tombee74)\
**Replies:** 1\
**Last updated:** [May 5, 2020, 8:30am UTC](https://discuss.elastic.co/t/specific-timeout-for-forcemerge-request/231089 "2020-05-05T08:30:59Z")

</div>

Hello, I'm using 'sync' force-merge request after bulk-indexing of large data set (230 millions documents). The client timeouts after 10 mins: java.net.SocketTimeoutException: 600,000 milliseconds timeout on connectio…

---

## [Choosing filed and tag in filebeat](https://discuss.elastic.co/t/choosing-filed-and-tag-in-filebeat/120914)

<div class="topic-metadata">

**Author:** [@nsphaniraj](https://discuss.elastic.co/u/nsphaniraj)\
**Replies:** 1\
**Last updated:** [February 22, 2018, 9:46am UTC](https://discuss.elastic.co/t/choosing-filed-and-tag-in-filebeat/120914 "2018-02-22T09:46:00Z")

</div>

Hello, I am trying to understand if we have to use field or tag in filebeat prospectors. What are the use cases of using fields and tags? When should we use fields over tags? Is there any performance impact on elasticse…

---

## [Why configuring logging mikrotik to kibana.?](https://discuss.elastic.co/t/why-configuring-logging-mikrotik-to-kibana/59771)

<div class="topic-metadata">

**Author:** [@Amryan\_18](https://discuss.elastic.co/u/Amryan_18)\
**Replies:** 1\
**Last updated:** [September 5, 2016, 3:29am UTC](https://discuss.elastic.co/t/why-configuring-logging-mikrotik-to-kibana/59771 "2016-09-05T03:29:55Z")

</div>

Can elasticsearch , Kibana and logstash take or pull data logging of proxy . ? if you can like where way configuration. ? please explain . ? Thank you very much

---

## [Marvel documentation/manual](https://discuss.elastic.co/t/marvel-documentation-manual/44273)

<div class="topic-metadata">

**Author:** [@abhi](https://discuss.elastic.co/u/abhi)\
**Replies:** 3\
**Last updated:** [August 20, 2016, 2:41pm UTC](https://discuss.elastic.co/t/marvel-documentation-manual/44273 "2016-08-20T14:41:29Z")

</div>

Hi All, Can anyone point me the location for marvel document? I am mainly interested to know about statistic. For example: - What is the meaning of Load(1m) graph. - Load graph Color difference (white, yellow and red)…

---

## [UX - Kibana Graph plugin - should have option to retain field selection when switching indices](https://discuss.elastic.co/t/ux-kibana-graph-plugin-should-have-option-to-retain-field-selection-when-switching-indices/49910)

<div class="topic-metadata">

**Author:** [@rmoff](https://discuss.elastic.co/u/rmoff)\
**Replies:** 3\
**Last updated:** [June 1, 2016, 10:37am UTC](https://discuss.elastic.co/t/ux-kibana-graph-plugin-should-have-option-to-retain-field-selection-when-switching-indices/49910 "2016-06-01T10:37:08Z")

</div>

If an index is simply partitioned on date the user will often want to run the same set of fields against a different instance of the same set of data. At the moment switching index resets all the field selections. This i…

---

## [Replica Shard 也能提升aggregation的效率吗？](https://discuss.elastic.co/t/replica-shard-aggregation/42446)

<div class="topic-metadata">

**Author:** [@Kramer\_Li](https://discuss.elastic.co/u/Kramer_Li)\
**Replies:** 3\
**Last updated:** [March 2, 2016, 4:59pm UTC](https://discuss.elastic.co/t/replica-shard-aggregation/42446 "2016-03-02T16:59:06Z")

</div>

Hi I know Replica Shard can help to improve search. But how about aggregation? Aggregation is based on field data or Doc Value. So I\`m not sure if the replica shard (which is inverted index) will help aggregation also? …

---

## [Fetching error from APM](https://discuss.elastic.co/t/fetching-error-from-apm/264975)

<div class="topic-metadata">

**Author:** [@akoua\_yao\_alex\_didie](https://discuss.elastic.co/u/akoua_yao_alex_didie)\
**Replies:** 2\
**Last updated:** [August 21, 2021, 5:53pm UTC](https://discuss.elastic.co/t/fetching-error-from-apm/264975 "2021-08-21T17:53:06Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: TIP 1: select at lea…

---

## [Swap, elasticsearch and docker](https://discuss.elastic.co/t/swap-elasticsearch-and-docker/236427)

<div class="topic-metadata">

**Author:** [@ElasticLiver](https://discuss.elastic.co/u/ElasticLiver)\
**Replies:** 2\
**Last updated:** [June 11, 2020, 11:08pm UTC](https://discuss.elastic.co/t/swap-elasticsearch-and-docker/236427 "2020-06-11T23:08:38Z")

</div>

Its recommended to disable swap in the elasticsearch machine, but I was wandering if I have three elastic nodes on docker, is still recommended to disable swap?

---

## [Snort CSV Parsing](https://discuss.elastic.co/t/snort-csv-parsing/123985)

<div class="topic-metadata">

**Author:** [@Brandonmcgr](https://discuss.elastic.co/u/Brandonmcgr)\
**Replies:** 2\
**Last updated:** [March 14, 2018, 8:17pm UTC](https://discuss.elastic.co/t/snort-csv-parsing/123985 "2018-03-14T20:17:39Z")

</div>

Hello, I'm working on sending my Snort logs to ELK. So far, if i send it directly to Elasticsearch. It works, but obviously with poor formatting. However, when sending it to logstash; I recieve some weird issues. Here…

---

## [Подсветка фраз со стоп-словами при match\_phrase поиске](https://discuss.elastic.co/t/match-phrase/31630)

<div class="topic-metadata">

**Author:** [@strikerdimabel](https://discuss.elastic.co/u/strikerdimabel)\
**Replies:** 2\
**Last updated:** [November 24, 2015, 11:00am UTC](https://discuss.elastic.co/t/match-phrase/31630 "2015-11-24T11:00:24Z")

</div>

Добрый день! Возникла проблема, связанная с подсветкой результатов поиска: никакой подсветки вообще не выдаётся. Она имеет место, если: 1. к полю привязан термвектор ("with\_positions\_offsets"); 2. ищем фразу; 3. в фраз…

---

## [What's the best approach to balance the text similarity with different fields weights?](https://discuss.elastic.co/t/whats-the-best-approach-to-balance-the-text-similarity-with-different-fields-weights/171898)

<div class="topic-metadata">

**Author:** [@Morriaty](https://discuss.elastic.co/u/Morriaty)\
**Replies:** 3\
**Last updated:** [March 22, 2019, 9:18am UTC](https://discuss.elastic.co/t/whats-the-best-approach-to-balance-the-text-similarity-with-different-fields-weights/171898 "2019-03-22T09:18:36Z")

</div>

Say we have two docs {"\_id": 1, "title": "James Harden wins the MVP", "content": "xxxxxxxxxxxxxxxxxxxxxx"} {"\_id": 2, "title": "The new 007 movie comes!", "content": "xxxx James Bond xxxxxxxxxxxxx"} And when users sea…

---

## ["Disk quota exceeded" Exception when mounting elasticsearch volume on EFS](https://discuss.elastic.co/t/disk-quota-exceeded-exception-when-mounting-elasticsearch-volume-on-efs/246021)

<div class="topic-metadata">

**Author:** [@ahmed75](https://discuss.elastic.co/u/ahmed75)\
**Replies:** 4\
**Last updated:** [August 23, 2020, 2:06pm UTC](https://discuss.elastic.co/t/disk-quota-exceeded-exception-when-mounting-elasticsearch-volume-on-efs/246021 "2020-08-23T14:06:20Z")

</div>

I'm running EFK Stack on my EKS cluster and i'm mounting elasticsearch volume on EFS so my data won't be lost when the container is restarted, however after few months my elasticsearch pod raised this exception "Disk quo…

---

## [Multiple http filters at the same time](https://discuss.elastic.co/t/multiple-http-filters-at-the-same-time/226839)

<div class="topic-metadata">

**Author:** [@akhilsharma.in](https://discuss.elastic.co/u/akhilsharma.in)\
**Replies:** 8\
**Last updated:** [April 7, 2020, 11:54am UTC](https://discuss.elastic.co/t/multiple-http-filters-at-the-same-time/226839 "2020-04-07T11:54:29Z")

</div>

Hi Team, Does Logstash support multiple http filters at the same time? Please confirm.

---

## [Esrally is now report support es7?](https://discuss.elastic.co/t/esrally-is-now-report-support-es7/177412)

<div class="topic-metadata">

**Author:** [@zqc0512](https://discuss.elastic.co/u/zqc0512)\
**Replies:** 8\
**Last updated:** [April 23, 2019, 10:16am UTC](https://discuss.elastic.co/t/esrally-is-now-report-support-es7/177412 "2019-04-23T10:16:48Z")

</div>

esrally is now support es7? when i use esrally report to elasticsearch esrally test with http\_logs can't put mapping in es7 log \[2019-04-18T15:44:07,457\]\[DEBUG\]\[o.e.a.a.i.t.p.TransportPutIndexTemplateAction\] \[node-3\]…

---

## [Blob size with S3](https://discuss.elastic.co/t/blob-size-with-s3/2962)

<div class="topic-metadata">

**Author:** [@Andrew\_Harvey\_2](https://discuss.elastic.co/u/Andrew_Harvey_2)\
**Replies:** 8\
**Last updated:** [May 23, 2010, 7:24pm UTC](https://discuss.elastic.co/t/blob-size-with-s3/2962 "2010-05-23T19:24:23Z")

</div>

I added a new machine to my cluster of 4, running elasticsearch 0.7.1, using the cloud plugin for gateway and discovery. I noticed a lot of these coming through the logs: \[16:22:25,309\]\[WARN \]\[index.gateway …

---

## [Can I push logs to logstash via an API endpoint?](https://discuss.elastic.co/t/can-i-push-logs-to-logstash-via-an-api-endpoint/313399)

<div class="topic-metadata">

**Author:** [@clarkmcc](https://discuss.elastic.co/u/clarkmcc)\
**Replies:** 1\
**Last updated:** [August 31, 2022, 10:43pm UTC](https://discuss.elastic.co/t/can-i-push-logs-to-logstash-via-an-api-endpoint/313399 "2022-08-31T22:43:33Z")

</div>

We have ~30 services that run on customer-premise (not our premise) and we'd like to push logs from our service on their machine to an Elasticsearch instance for debugging and analysis. We'd like to avoid having to insta…

---

## [Failed to load plugin class \[org.elasticsearch.xpack.core.XPackPlugin\]](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/296531)

<div class="topic-metadata">

**Author:** [@Ravi\_Bhushan](https://discuss.elastic.co/u/Ravi_Bhushan)\
**Replies:** 7\
**Last updated:** [February 8, 2022, 4:28am UTC](https://discuss.elastic.co/t/failed-to-load-plugin-class-org-elasticsearch-xpack-core-xpackplugin/296531 "2022-02-08T04:28:11Z")

</div>

Hi All, I am trying to install Elasticsearch 6.8.23 Opensource version in Docker swarm. What I understand from document i that xpack is available in free version to implement node & http communication. Please correct m…

---

## [Security settings for Elastic SIEM on-prem](https://discuss.elastic.co/t/security-settings-for-elastic-siem-on-prem/245738)

<div class="topic-metadata">

**Author:** [@john7](https://discuss.elastic.co/u/john7)\
**Replies:** 1\
**Last updated:** [August 20, 2020, 12:08pm UTC](https://discuss.elastic.co/t/security-settings-for-elastic-siem-on-prem/245738 "2020-08-20T12:08:14Z")

</div>

Hi everyone, I'm working on setting up a small Elastic Cluster as a proof of concept for a SIEM. Consisting of 3 elastic nodes, one kibana node and one logstash node. I managed to get a working cluster without the sec…

---

## [How can I split up my message log lines in separate tabs/fields?](https://discuss.elastic.co/t/how-can-i-split-up-my-message-log-lines-in-separate-tabs-fields/237531)

<div class="topic-metadata">

**Author:** [@Roger\_Payne](https://discuss.elastic.co/u/Roger_Payne)\
**Replies:** 1\
**Last updated:** [June 18, 2020, 11:22am UTC](https://discuss.elastic.co/t/how-can-i-split-up-my-message-log-lines-in-separate-tabs-fields/237531 "2020-06-18T11:22:15Z")

</div>

Hello All, Yesterday, I set up ELK so I can send my routers syslogs to make it easier to view. I've completed this by installing a ubuntu server with rsyslogd, ELK and beats from a few online how to's. Next I sent the l…

---

## [Antivirus Exclustions & Performance considerations](https://discuss.elastic.co/t/antivirus-exclustions-performance-considerations/232845)

<div class="topic-metadata">

**Author:** [@vladtepes](https://discuss.elastic.co/u/vladtepes)\
**Replies:** 1\
**Last updated:** [May 15, 2020, 3:00pm UTC](https://discuss.elastic.co/t/antivirus-exclustions-performance-considerations/232845 "2020-05-15T15:00:52Z")

</div>

Hi, I would like to know what is the guidance on antivirus for Elasticsearch? Which paths should be excluded and with what justification? I am writing about the 7.6.2 version on Windows.

---

## [Ruby on Rails Can't Access Server](https://discuss.elastic.co/t/ruby-on-rails-cant-access-server/174861)

<div class="topic-metadata">

**Author:** [@seanturner](https://discuss.elastic.co/u/seanturner)\
**Replies:** 7\
**Last updated:** [April 9, 2019, 2:39pm UTC](https://discuss.elastic.co/t/ruby-on-rails-cant-access-server/174861 "2019-04-09T14:39:11Z")

</div>

Hi, I just launched a trial so I imagine everything is up to date. So far I have.. Added the elastic-apm gem Uncommented the lines for my elastic\_apm.yml Loaded the kibana objects as directed to in the setup docs Used…

---

## [Elasticsearch nodes iowait every day at around 10AM (UTC time 8AM)](https://discuss.elastic.co/t/elasticsearch-nodes-iowait-every-day-at-around-10am-utc-time-8am/173260)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 7\
**Last updated:** [March 21, 2019, 9:31am UTC](https://discuss.elastic.co/t/elasticsearch-nodes-iowait-every-day-at-around-10am-utc-time-8am/173260 "2019-03-21T09:31:51Z")

</div>

Hi Elastic 6.6.1 Centos 7.6 I have discovered that, every day at around 10AM (we are on UTC+2h, so UTC time would be 8AM) elastic cluster nodes iowait rapidly increases, including weekends, where there are not that mu…

---

## [How to find the distinct values in a nested type field in elasticsearch? Can anyone provide one example?](https://discuss.elastic.co/t/how-to-find-the-distinct-values-in-a-nested-type-field-in-elasticsearch-can-anyone-provide-one-example/156384)

<div class="topic-metadata">

**Author:** [@deepak643](https://discuss.elastic.co/u/deepak643)\
**Replies:** 1\
**Last updated:** [November 13, 2018, 4:36am UTC](https://discuss.elastic.co/t/how-to-find-the-distinct-values-in-a-nested-type-field-in-elasticsearch-can-anyone-provide-one-example/156384 "2018-11-13T04:36:54Z")

</div>

I am looking for one example on how to extract distinct values of a nested type property in elastic search. Could anyone provide an example? I have a below query where I am trying to retrieve distinct values of "batchId…

---

## [RabbitMQ and Zabbix Plugins](https://discuss.elastic.co/t/rabbitmq-and-zabbix-plugins/107057)

<div class="topic-metadata">

**Author:** [@demudrol](https://discuss.elastic.co/u/demudrol)\
**Replies:** 7\
**Last updated:** [November 16, 2017, 11:38am UTC](https://discuss.elastic.co/t/rabbitmq-and-zabbix-plugins/107057 "2017-11-16T11:38:48Z")

</div>

Hi there! I've got two plugins: Rabbitmq input plugin Zabbix output plugin Took some data from RabbitMQ and now i've got responseAnswer.Code filed. Now i want to send this filed to zabbix: if \[type\] == "ld.api.lo…

---

## [\[Problem\] Unique items per day graph](https://discuss.elastic.co/t/problem-unique-items-per-day-graph/90089)

<div class="topic-metadata">

**Author:** [@dataminer](https://discuss.elastic.co/u/dataminer)\
**Replies:** 1\
**Last updated:** [June 20, 2017, 12:08pm UTC](https://discuss.elastic.co/t/problem-unique-items-per-day-graph/90089 "2017-06-20T12:08:23Z")

</div>

Hi all and aplogies for this, its probably a very numpty question but I just can't get it. I have a small ES instance with 400 items in a collection with a date field that Kibana picks up when I set up the index. Now, …

---

## [How properly config RELK](https://discuss.elastic.co/t/how-properly-config-relk/76002)

<div class="topic-metadata">

**Author:** [@emilio](https://discuss.elastic.co/u/emilio)\
**Replies:** 1\
**Last updated:** [February 22, 2017, 2:35pm UTC](https://discuss.elastic.co/t/how-properly-config-relk/76002 "2017-02-22T14:35:38Z")

</div>

Dear all, I need your help. I am beginner with RELK. So, maybe my questions will seem somitimes strange for you. I,'ve installed logstash, Redis, Elastichsearch, Kibana and Nginx on separate servers: Server #1 l…

---

## [Load data into HDFS using ES-Spark](https://discuss.elastic.co/t/load-data-into-hdfs-using-es-spark/297)

<div class="topic-metadata">

**Author:** [@Lucas\_Weissert](https://discuss.elastic.co/u/Lucas_Weissert)\
**Replies:** 1\
**Last updated:** [May 14, 2015, 6:22am UTC](https://discuss.elastic.co/t/load-data-into-hdfs-using-es-spark/297 "2015-05-14T06:22:55Z")

</div>

Hello, I am reading data from elasticsearch using spark (ES-Spark). After i get the data using sc.esRDD(".../...") I want to store everything in HDFS so I use the saveAsTextFile method but it is very slow ... Am I do…

---

## [Help with http certs in elasticsearch](https://discuss.elastic.co/t/help-with-http-certs-in-elasticsearch/327371)

<div class="topic-metadata">

**Author:** [@Mary2022](https://discuss.elastic.co/u/Mary2022)\
**Replies:** 5\
**Last updated:** [March 12, 2023, 1:11pm UTC](https://discuss.elastic.co/t/help-with-http-certs-in-elasticsearch/327371 "2023-03-12T13:11:19Z")

</div>

I used elasticsearch-certutil with my companies CA.jks to create http certificates for my node but I am at the last step to send the output zip file to the path I give I get the following error: Exception in thread "mai…

---

## [Elasticsearch terms query is very slow?](https://discuss.elastic.co/t/elasticsearch-terms-query-is-very-slow/265169)

<div class="topic-metadata">

**Author:** [@Karthick\_K](https://discuss.elastic.co/u/Karthick_K)\
**Replies:** 5\
**Last updated:** [February 23, 2021, 9:24am UTC](https://discuss.elastic.co/t/elasticsearch-terms-query-is-very-slow/265169 "2021-02-23T09:24:25Z")

</div>

Elasticsearch cluster Master node : 1 (16cpus, 128GB RAM) - 32GB is allocated for HEAP Data nodes : 6 (each node 16cpus, 128GB RAM) - 32GB is allocated for HEAP for all nodes Indices : 9 Total documents : 48,826,456…

---

## [Issue installing Logstash no such file to load -- bundler](https://discuss.elastic.co/t/issue-installing-logstash-no-such-file-to-load-bundler/260041)

<div class="topic-metadata">

**Author:** [@Grant1999](https://discuss.elastic.co/u/Grant1999)\
**Replies:** 5\
**Last updated:** [January 3, 2021, 6:15pm UTC](https://discuss.elastic.co/t/issue-installing-logstash-no-such-file-to-load-bundler/260041 "2021-01-03T18:15:29Z")

</div>

I have downloaded kibana and elastic search on windows 10 64 bit and now trying to install logstash. But I get this error when I type in the command any ideas? C:\\Elasticstack\\logstash-7.10.1\>logstash -f logstash.conf U…

---

## [Kibana can't startup successfully after enable ssl and xpack in elasticsearch6.7.1](https://discuss.elastic.co/t/kibana-cant-startup-successfully-after-enable-ssl-and-xpack-in-elasticsearch6-7-1/177716)

<div class="topic-metadata">

**Author:** [@sunweiconfidence](https://discuss.elastic.co/u/sunweiconfidence)\
**Replies:** 5\
**Last updated:** [April 22, 2019, 10:02am UTC](https://discuss.elastic.co/t/kibana-cant-startup-successfully-after-enable-ssl-and-xpack-in-elasticsearch6-7-1/177716 "2019-04-22T10:02:13Z")

</div>

my configuration for kibana is below: server.port: 5601 server.host: "0.0.0.0" server.name: "MyPc1" elasticsearch.hosts: \["https://MyPc1:9500"\] kibana.index: ".kibana" kibana.defaultAppId: "discover" elasticsearch.userna…

---

## [Configuring ES to reject \> N concurrent requests](https://discuss.elastic.co/t/configuring-es-to-reject-n-concurrent-requests/8175)

<div class="topic-metadata">

**Author:** [@otisg](https://discuss.elastic.co/u/otisg)\
**Replies:** 5\
**Last updated:** [June 25, 2012, 5:41pm UTC](https://discuss.elastic.co/t/configuring-es-to-reject-n-concurrent-requests/8175 "2012-06-25T17:41:19Z")

</div>

Hi, Is there anything in ES that could be used to control how many concurrent connections/request each node in the cluster can handle? I'm asking because on one largish ES system we are working on we regularly g…

---

## [Elasticsearch 6.8.10 memory leak](https://discuss.elastic.co/t/elasticsearch-6-8-10-memory-leak/253972)

<div class="topic-metadata">

**Author:** [@zcola](https://discuss.elastic.co/u/zcola)\
**Replies:** 6\
**Last updated:** [November 11, 2020, 9:33am UTC](https://discuss.elastic.co/t/elasticsearch-6-8-10-memory-leak/253972 "2020-11-11T09:33:01Z")

</div>

100+ node es cluster , hot/warm arch The stale node heap is 31gb, and multiple nodes occupy 90% of the heap irregularly. It will appear again one week after restarting. segment memory(14g), query cache(2.6g), single st…

---

## [Associating/combining data from secondary records](https://discuss.elastic.co/t/associating-combining-data-from-secondary-records/97291)

<div class="topic-metadata">

**Author:** [@dm221](https://discuss.elastic.co/u/dm221)\
**Replies:** 6\
**Last updated:** [August 21, 2017, 8:25pm UTC](https://discuss.elastic.co/t/associating-combining-data-from-secondary-records/97291 "2017-08-21T20:25:53Z")

</div>

In Kibana I often want to associate data from different records together. For example I have a location/geopoint associated with an IP address in one record, and in another record I have the same IP associated with an E…

---

## [Unnamed mapping for PUT](https://discuss.elastic.co/t/unnamed-mapping-for-put/24969)

<div class="topic-metadata">

**Author:** [@daver208](https://discuss.elastic.co/u/daver208)\
**Replies:** 6\
**Last updated:** [July 7, 2015, 1:40pm UTC](https://discuss.elastic.co/t/unnamed-mapping-for-put/24969 "2015-07-07T13:40:02Z")

</div>

The mapping documentation states that the following code will create a tweet type on the twitter index with the specified mapping $ curl -XPUT 'http://localhost:9200/twitter/\_mapping/tweet' -d ' { "tweet" : { …

---

## [Filebeat pod stopped, crashloopbackoff](https://discuss.elastic.co/t/filebeat-pod-stopped-crashloopbackoff/218456)

<div class="topic-metadata">

**Author:** [@izazahamed.babji](https://discuss.elastic.co/u/izazahamed.babji)\
**Replies:** 2\
**Last updated:** [February 13, 2020, 1:58am UTC](https://discuss.elastic.co/t/filebeat-pod-stopped-crashloopbackoff/218456 "2020-02-13T01:58:29Z")

</div>

kubectl logs filebeat-filebeat-bl6x6 -f 2020-02-09T00:55:31.955Z INFO instance/beat.go:610 Home path: \[/usr/share/filebeat\] Config path: \[/usr/share/filebeat\] Data path: \[/usr/share/filebeat/data\] Logs path: \[/usr/share/…

---

## [Divides two sum fields in kibana?](https://discuss.elastic.co/t/divides-two-sum-fields-in-kibana/217386)

<div class="topic-metadata">

**Author:** [@Bilal2](https://discuss.elastic.co/u/Bilal2)\
**Replies:** 2\
**Last updated:** [January 31, 2020, 4:26pm UTC](https://discuss.elastic.co/t/divides-two-sum-fields-in-kibana/217386 "2020-01-31T16:26:29Z")

</div>

Hello I am anew in elasticsearch and I want to know how to divide two sum fields (example: sum of prime annuel groupe / sum of adherent) in kibana Metric visualization. Thanks!

---

## [Index space usage with text and keyword datatype](https://discuss.elastic.co/t/index-space-usage-with-text-and-keyword-datatype/191413)

<div class="topic-metadata">

**Author:** [@ypid-geberit](https://discuss.elastic.co/u/ypid-geberit)\
**Replies:** 2\
**Last updated:** [July 25, 2019, 1:27pm UTC](https://discuss.elastic.co/t/index-space-usage-with-text-and-keyword-datatype/191413 "2019-07-25T13:27:22Z")

</div>

Dear Elastic community, We have a logging use case where the message field is quite big, specifically Windows logs collected using winlogbeat. We currently index the message field as text and also as keyword. We were cu…

---

## [\[Elastic\]\[Logstash\] Ask for help on parsing the Microsoft exchange logs](https://discuss.elastic.co/t/elastic-logstash-ask-for-help-on-parsing-the-microsoft-exchange-logs/126369)

<div class="topic-metadata">

**Author:** [@Robin\_Guo](https://discuss.elastic.co/u/Robin_Guo)\
**Replies:** 2\
**Last updated:** [April 4, 2018, 8:18am UTC](https://discuss.elastic.co/t/elastic-logstash-ask-for-help-on-parsing-the-microsoft-exchange-logs/126369 "2018-04-04T08:18:18Z")

</div>

Dear Elastic colleagues && folks, Recently there is a request from our security team that they need to collect the Microsoft exchange message tracking logs from our exchange servers, every line from original exchange l…

[Previous page](https://discuss.elastic.co/top.md?page=1080&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1082&per_page=50&period=all)
