# Top **URL:** https://discuss.elastic.co/top.md?page=1084&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1085 --- ## [Is omitting "sort" same as sorting by \_doc?](https://discuss.elastic.co/t/is-omitting-sort-same-as-sorting-by--doc/38898)
**Author:** [@dimitris](https://discuss.elastic.co/u/dimitris)\ **Replies:** 4\ **Last updated:** [February 24, 2016, 2:30pm UTC](https://discuss.elastic.co/t/is-omitting-sort-same-as-sorting-by--doc/38898 "2016-02-24T14:30:01Z")
When sorting is not specified at all, is performance going to be equivalent to having specified sorting upon the "\_doc" field? --- ## [Legend not displyaing count](https://discuss.elastic.co/t/legend-not-displyaing-count/137746)
**Author:** [@abhishek007](https://discuss.elastic.co/u/abhishek007)\ **Replies:** 3\ **Last updated:** [June 29, 2018, 4:30pm UTC](https://discuss.elastic.co/t/legend-not-displyaing-count/137746 "2018-06-29T16:30:10Z")
Hi, I have created the time series graph using visula builder in Kibana 6.2.3. However the legend at right side does not show the number of count. it only displays count only when I bring mouse cursor on the line grap… --- ## [Kibana 5 coordinate map - unique terms](https://discuss.elastic.co/t/kibana-5-coordinate-map-unique-terms/104507)
**Author:** [@tallavi](https://discuss.elastic.co/u/tallavi)\ **Replies:** 3\ **Last updated:** [October 24, 2017, 12:43pm UTC](https://discuss.elastic.co/t/kibana-5-coordinate-map-unique-terms/104507 "2017-10-24T12:43:38Z")
Hi, I'm trying to do a visualization, of what I percieve to be quite a basic scenario, but I can't get it to work! Each document have: clientId (string), timestamp, geohash. I want to show a map of the LATEST location… --- ## [Excluding word from Kibana query](https://discuss.elastic.co/t/excluding-word-from-kibana-query/52010)
**Author:** [@trekr5](https://discuss.elastic.co/u/trekr5)\ **Replies:** 3\ **Last updated:** [June 7, 2016, 8:12am UTC](https://discuss.elastic.co/t/excluding-word-from-kibana-query/52010 "2016-06-07T08:12:02Z")
Hi, I have a situation where my query returns: GET /fundraising/alice GET /fundraising/benny I would like the response to be GET /alice GET /benny I tried in my exclude pattern: |./\\fundraising/. If I use .… --- ## [Random scan results?](https://discuss.elastic.co/t/random-scan-results/15908)
**Author:** [@Josh\_Harrison](https://discuss.elastic.co/u/Josh_Harrison)\ **Replies:** 3\ **Last updated:** [February 19, 2014, 11:01pm UTC](https://discuss.elastic.co/t/random-scan-results/15908 "2014-02-19T23:01:19Z")
I need to be able to pull 100s of thousands to millions of random documents from my indexes. Normally, to pull data this large I'd do a scan query, but they don't support sorting, so the suggestions I've seen online … --- ## [How to calculate Inverse Document Frequency for particular term?](https://discuss.elastic.co/t/how-to-calculate-inverse-document-frequency-for-particular-term/36830)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 1\ **Last updated:** [December 10, 2015, 1:27pm UTC](https://discuss.elastic.co/t/how-to-calculate-inverse-document-frequency-for-particular-term/36830 "2015-12-10T13:27:14Z")
PUT /my\_index/doc/1 { "text" : "quick brown fox" } GET /my\_index/doc/\_search?explain { "query": { "term": { "text": "fox" } } } weight(text:fox in 0) \[PerFieldSimilarity\]: 0.15342641 result of: … --- ## [Curator cannot delete older indices](https://discuss.elastic.co/t/curator-cannot-delete-older-indices/205496)
**Author:** [@Jan\_Kaspar](https://discuss.elastic.co/u/Jan_Kaspar)\ **Replies:** 5\ **Last updated:** [October 28, 2019, 5:14pm UTC](https://discuss.elastic.co/t/curator-cannot-delete-older-indices/205496 "2019-10-28T17:14:02Z")
Hi all, i would like to delete indices older X days. I found a lot of posts here but no one helped me. My action file: actions: 1: action: delete\_indices description: \>- Delete indices older than 60 days (based on… --- ## [Performance Challenge](https://discuss.elastic.co/t/performance-challenge/80509)
**Author:** [@krajaram](https://discuss.elastic.co/u/krajaram)\ **Replies:** 5\ **Last updated:** [March 31, 2017, 2:49pm UTC](https://discuss.elastic.co/t/performance-challenge/80509 "2017-03-31T14:49:33Z")
I have a small 3 node Elasticsearch cluster (each VM 8 Cores, 28 Gb RAM, 56 GB SSD). I am using Spark Streaming (Dstreams) to stream data from MQTT broker into ES. The index has 50M documents. When I use spark sql and cr… --- ## [Converting rest api to java api](https://discuss.elastic.co/t/converting-rest-api-to-java-api/55784)
**Author:** [@jcls](https://discuss.elastic.co/u/jcls)\ **Replies:** 5\ **Last updated:** [July 19, 2016, 10:42pm UTC](https://discuss.elastic.co/t/converting-rest-api-to-java-api/55784 "2016-07-19T22:42:03Z")
Hi all, I am trying to build a proxy that will take elasticsearch requests that come in rest api form and convert them to elasicsearch's java api equivalent and then send and get the requests through 9300. I have seen … --- ## [Split chart with individual y axis?](https://discuss.elastic.co/t/split-chart-with-individual-y-axis/288492)
**Author:** [@NiclasK](https://discuss.elastic.co/u/NiclasK)\ **Replies:** 2\ **Last updated:** [November 19, 2021, 12:40pm UTC](https://discuss.elastic.co/t/split-chart-with-individual-y-axis/288492 "2021-11-19T12:40:52Z")
Hi, I have a field that contains a string representation of a state. Some states are normal which means that there are many documents with these states. Other states represents errors. Usually, the number of documents c… --- ## [Does APM for NodeJS require Python? (gyp ERR)](https://discuss.elastic.co/t/does-apm-for-nodejs-require-python-gyp-err/169364)
**Author:** [@cawoodm](https://discuss.elastic.co/u/cawoodm)\ **Replies:** 2\ **Last updated:** [April 12, 2019, 9:24am UTC](https://discuss.elastic.co/t/does-apm-for-nodejs-require-python-gyp-err/169364 "2019-04-12T09:24:33Z")
ELK 6.5 Windows, APM Server 6.6.1 Just wanted to try out APM in a small NodeJS app and was surprised to find it asking for python. This is not listed as a dependency nor a requirement when installing APM so I was wonder… --- ## [Hide component title in dashboard](https://discuss.elastic.co/t/hide-component-title-in-dashboard/103714)
**Author:** [@RomainXie](https://discuss.elastic.co/u/RomainXie)\ **Replies:** 2\ **Last updated:** [October 12, 2017, 12:30pm UTC](https://discuss.elastic.co/t/hide-component-title-in-dashboard/103714 "2017-10-12T12:30:54Z")
In a dashboard, the Guage component can be hide the visualize name. Could I hide the Markdown component title as the same? \[WechatIMG2809\] --- ## [Kibana map date format](https://discuss.elastic.co/t/kibana-map-date-format/276369)
**Author:** [@jvidin](https://discuss.elastic.co/u/jvidin)\ **Replies:** 7\ **Last updated:** [June 21, 2021, 2:02pm UTC](https://discuss.elastic.co/t/kibana-map-date-format/276369 "2021-06-21T14:02:26Z")
Hi There , Im ingesting some 'date type' data using the following mapping properties. "processed\_date": { "type": "date", "format": "yyyy/MM/dd HH:mm:ss.SSSZZ||yyyy/MM/dd HH:mm:ss.SSS||yyyy/MM/dd" … --- ## [Filebeat 6.6 system module fields not being exported(or parsed)](https://discuss.elastic.co/t/filebeat-6-6-system-module-fields-not-being-exported-or-parsed/169476)
**Author:** [@ChrisOdney](https://discuss.elastic.co/u/ChrisOdney)\ **Replies:** 7\ **Last updated:** [March 4, 2019, 5:40am UTC](https://discuss.elastic.co/t/filebeat-6-6-system-module-fields-not-being-exported-or-parsed/169476 "2019-03-04T05:40:52Z")
Hi, I have installed filebeat and enabled the system module, I have also loaded the ingest pipelines manually as the filebeat output is being sent to logstash and to ES from there. The system dashboards were working ear… --- ## [Packetbeat create pcap file and ingest data](https://discuss.elastic.co/t/packetbeat-create-pcap-file-and-ingest-data/266992)
**Author:** [@andywt123](https://discuss.elastic.co/u/andywt123)\ **Replies:** 1\ **Last updated:** [March 11, 2021, 9:01pm UTC](https://discuss.elastic.co/t/packetbeat-create-pcap-file-and-ingest-data/266992 "2021-03-11T21:01:42Z")
We have a requirement to create and store pcap files for all of our web server traffic. I wanted to find out if anyone has used packetbeat to create pcap files to be store and also ingest the data to be used in dashboard… --- ## [How to tuning aggregation performance](https://discuss.elastic.co/t/how-to-tuning-aggregation-performance/44076)
**Author:** [@QD\_Wang](https://discuss.elastic.co/u/QD_Wang)\ **Replies:** 1\ **Last updated:** [March 12, 2016, 9:52am UTC](https://discuss.elastic.co/t/how-to-tuning-aggregation-performance/44076 "2016-03-12T09:52:04Z")
Hi there We have a problem with our ES aggregation query, it took 10-12s to execute. so here is our cluster information we have 1 client node, 3 master nodes and 6 data nodes for data node, its 16 cores. and 64GB mem… --- ## [Работа с социальными данными. Персонализированная выдача. Ранжирование результатов выдачи по нескольким критериям](https://discuss.elastic.co/t/topic/40553)
**Author:** [@i.kozharov](https://discuss.elastic.co/u/i.kozharov)\ **Replies:** 1\ **Last updated:** [January 30, 2016, 5:20pm UTC](https://discuss.elastic.co/t/topic/40553 "2016-01-30T17:20:14Z")
Здравствуйте, есть следующий кейс, индекс содержит данные о пользователях. Ищем по полному или частичному совпадению в username или full\_name. В приоритете совпадения в username. Результат нужно сортировать по нескольким… --- ## [Elastic Search output piping similar to splunk](https://discuss.elastic.co/t/elastic-search-output-piping-similar-to-splunk/121898)
**Author:** [@sklein](https://discuss.elastic.co/u/sklein)\ **Replies:** 0\ **Last updated:** [February 28, 2018, 4:47pm UTC](https://discuss.elastic.co/t/elastic-search-output-piping-similar-to-splunk/121898 "2018-02-28T16:47:09Z")
Hi, We Need to extract a Duration value from the message field (e.g. Duration="10.400") We Need to summarize this value for a Special time period and we need to multiply the total summ for example with 0,3. How can a v… --- ## [Starting with snapshots when we already have a large amount of data?](https://discuss.elastic.co/t/starting-with-snapshots-when-we-already-have-a-large-amount-of-data/305781)
**Author:** [@Andreas\_Falk](https://discuss.elastic.co/u/Andreas_Falk)\ **Replies:** 1\ **Last updated:** [May 27, 2022, 1:11pm UTC](https://discuss.elastic.co/t/starting-with-snapshots-when-we-already-have-a-large-amount-of-data/305781 "2022-05-27T13:11:09Z")
Hi, We shall do an upgrade from 7.10.2 to 7.17+ and have tried this is lab env. But one question that comes to mind is, how is the cluster going to react when starting a snapshot on over 10TB data with cold storage? W… --- ## [Index Lifecycle Management (ILM) based on a document field](https://discuss.elastic.co/t/index-lifecycle-management-ilm-based-on-a-document-field/273701)
**Author:** [@fefontana](https://discuss.elastic.co/u/fefontana)\ **Replies:** 4\ **Last updated:** [May 24, 2021, 2:13pm UTC](https://discuss.elastic.co/t/index-lifecycle-management-ilm-based-on-a-document-field/273701 "2021-05-24T14:13:41Z")
Hello, I would like to know if there is any way to partition and index based on a field of documents within it. I don't want to use the index size (like "max\_size"), nor the index time (like "max\_age") and nor max numbe… --- ## [Having problems starting Elasticsearch](https://discuss.elastic.co/t/having-problems-starting-elasticsearch/182106)
**Author:** [@Ronald\_Adams](https://discuss.elastic.co/u/Ronald_Adams)\ **Replies:** 4\ **Last updated:** [May 23, 2019, 3:16am UTC](https://discuss.elastic.co/t/having-problems-starting-elasticsearch/182106 "2019-05-23T03:16:29Z")
Having issues with Elasticsearch stopping. I can get it to start for a few moments but, then it fails. I'm trying to perform some testing with The Hive Project and this is consistent hangup. Thanks. RA. ● elasticsea… --- ## [Kibana not showing logs from logstash-\* if input is from s3 bucket](https://discuss.elastic.co/t/kibana-not-showing-logs-from-logstash-if-input-is-from-s3-bucket/86956)
**Author:** [@Sunil\_M](https://discuss.elastic.co/u/Sunil_M)\ **Replies:** 4\ **Last updated:** [June 22, 2017, 10:18am UTC](https://discuss.elastic.co/t/kibana-not-showing-logs-from-logstash-if-input-is-from-s3-bucket/86956 "2017-06-22T10:18:58Z")
Hi, I have one server with logstash installed and another one with elasticsearch and kibana. In logstash server if i use input file { path =\> "name.log" start\_position =\> "beginning" sincedb\_p… --- ## [Custom Query](https://discuss.elastic.co/t/custom-query/43785)
**Author:** [@rjperes](https://discuss.elastic.co/u/rjperes)\ **Replies:** 4\ **Last updated:** [March 15, 2017, 1:53pm UTC](https://discuss.elastic.co/t/custom-query/43785 "2017-03-15T13:53:50Z")
Hi, Is it possible to use a custom Elasticsearch query in Kibana? For example, I have a query that does several aggregations across different types, and I would like to setup a visualization for it. The Kibana UI only al… --- ## [Elasticsearch-Output to Elasticsearch-Cluster](https://discuss.elastic.co/t/elasticsearch-output-to-elasticsearch-cluster/65532)
**Author:** [@TWalter](https://discuss.elastic.co/u/TWalter)\ **Replies:** 4\ **Last updated:** [December 2, 2016, 8:15am UTC](https://discuss.elastic.co/t/elasticsearch-output-to-elasticsearch-cluster/65532 "2016-12-02T08:15:14Z")
Hello there, i have an Elasticsearch-Cluster with three nodes. When i import the data to the cluster with the Elasticsearch-Output-Plugin, which node do i choose as Destination? Is there a common expression for the … --- ## [Facing issue on SQL Server with Elastic Search](https://discuss.elastic.co/t/facing-issue-on-sql-server-with-elastic-search/41597)
**Author:** [@jayaramu](https://discuss.elastic.co/u/jayaramu)\ **Replies:** 4\ **Last updated:** [February 19, 2016, 7:10am UTC](https://discuss.elastic.co/t/facing-issue-on-sql-server-with-elastic-search/41597 "2016-02-19T07:10:45Z")
I have integrated SQL Server with Elastic Search. I face the problem with data type TEXT and NVARCHAR(MAX). If I use any of this datatype in SQL Server, no result is returned by Elastic Search. Why does this happen? … --- ## [How to get started with Elastic APM?](https://discuss.elastic.co/t/how-to-get-started-with-elastic-apm/328124)
**Author:** [@Shoeb\_Masum](https://discuss.elastic.co/u/Shoeb_Masum)\ **Replies:** 3\ **Last updated:** [April 6, 2023, 12:09pm UTC](https://discuss.elastic.co/t/how-to-get-started-with-elastic-apm/328124 "2023-04-06T12:09:52Z")
I want to explore Elastic APM to be used in some of our IT applications. The plan is to go with the free version of the self-managed Elastic APM. I learned four components of the Elastic APM solution - APM agents, APM Se… --- ## [SIEM -- Event Columns (Only Default Category)](https://discuss.elastic.co/t/siem-event-columns-only-default-category/234478)
**Author:** [@clearedskies](https://discuss.elastic.co/u/clearedskies)\ **Replies:** 8\ **Last updated:** [June 1, 2020, 2:15pm UTC](https://discuss.elastic.co/t/siem-event-columns-only-default-category/234478 "2020-06-01T14:15:18Z")
Hopefully, someone can help: In the SIEM section of Kibana, in the events section, I wish to customise the columns shown (I have parsed these logs using Logstash and wish to use these filters in the plugin). It appears… --- ## [Fails to index due to conflicting doc type](https://discuss.elastic.co/t/fails-to-index-due-to-conflicting-doc-type/200748)
**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\ **Replies:** 8\ **Last updated:** [September 24, 2019, 6:57am UTC](https://discuss.elastic.co/t/fails-to-index-due-to-conflicting-doc-type/200748 "2019-09-24T06:57:28Z")
Got the classic issue with a 6.8.3 cluster, I defined an index template and created it with ?include\_type\_name=false { "index\_patterns": \[ "esxi\_firewall-\*" \], "mappings": { "properties": { "@timestamp": {… --- ## [Master and Coordinating Nodes crashing with "fatal error on the network layer" and Heap OOM](https://discuss.elastic.co/t/master-and-coordinating-nodes-crashing-with-fatal-error-on-the-network-layer-and-heap-oom/155615)
**Author:** [@vijay.sangha](https://discuss.elastic.co/u/vijay.sangha)\ **Replies:** 8\ **Last updated:** [November 9, 2018, 5:22pm UTC](https://discuss.elastic.co/t/master-and-coordinating-nodes-crashing-with-fatal-error-on-the-network-layer-and-heap-oom/155615 "2018-11-09T17:22:46Z")
All was well until the recent reboot of the VM. Nothing changes except the OS patching. Somwhow the network connection between the nodes is dropping but they are not stayinh up for more than 15 minutes. Here is my setup … --- ## [How to present sum of each split bucket](https://discuss.elastic.co/t/how-to-present-sum-of-each-split-bucket/144991)
**Author:** [@zero-88](https://discuss.elastic.co/u/zero-88)\ **Replies:** 3\ **Last updated:** [August 22, 2018, 5:36pm UTC](https://discuss.elastic.co/t/how-to-present-sum-of-each-split-bucket/144991 "2018-08-22T17:36:29Z")
Hello all, I have a question for aggregation on Kibana, the context is following as Line chart Bucket: Date Histogram Bucket: Split series on field A Bucket: Split chart on field B Metric A: Count It means a list of … --- ## [Basic License expires after 1 month](https://discuss.elastic.co/t/basic-license-expires-after-1-month/129055)
**Author:** [@joeweoj](https://discuss.elastic.co/u/joeweoj)\ **Replies:** 3\ **Last updated:** [April 24, 2018, 9:49am UTC](https://discuss.elastic.co/t/basic-license-expires-after-1-month/129055 "2018-04-24T09:49:24Z")
Hi. We are using X-pack solely for it's monitoring capabilities at the moment (which are very good). Our Elasticsearch clusters are generated via automation (Cattle vs Pets style) and we generate a new cluster fairly f… --- ## [Проектирование elk](https://discuss.elastic.co/t/elk/33118)
**Author:** [@cwt](https://discuss.elastic.co/u/cwt)\ **Replies:** 3\ **Last updated:** [October 28, 2015, 12:33pm UTC](https://discuss.elastic.co/t/elk/33118 "2015-10-28T12:33:47Z")
Всем привет, хочу внедрить ELK в продакшн, много читал. На спланк денег жалко, везде пишут про шардинг, кластеринг ELK. Но я так и не понял что именно разделяют? Что больше потребляет ресурсов и требует разделения - L ил… --- ## [When using Index Life Cycle Management, how to limit queries to hot indexes](https://discuss.elastic.co/t/when-using-index-life-cycle-management-how-to-limit-queries-to-hot-indexes/202088)
**Author:** [@seperman](https://discuss.elastic.co/u/seperman)\ **Replies:** 5\ **Last updated:** [October 10, 2019, 8:54pm UTC](https://discuss.elastic.co/t/when-using-index-life-cycle-management-how-to-limit-queries-to-hot-indexes/202088 "2019-10-10T20:54:50Z")
Hello, I'm using ILM to divide my time series data into hot, warm, cold indexes. The hot indexes use more expensive hardware. Warm is read-only and force-merged. And cold is frozen and contains data older than 60 days. … --- ## [S3 as intermediate stage in Elastic stack pipeline](https://discuss.elastic.co/t/s3-as-intermediate-stage-in-elastic-stack-pipeline/94057)
**Author:** [@hilt86](https://discuss.elastic.co/u/hilt86)\ **Replies:** 2\ **Last updated:** [July 26, 2017, 2:55am UTC](https://discuss.elastic.co/t/s3-as-intermediate-stage-in-elastic-stack-pipeline/94057 "2017-07-26T02:55:25Z")
Hi Folks, Thanks to all for creating the Elastic stack (ELK) - it enables small businesses like my own to have visibility of security events and performance data that is too costly or inflexible with proprietary tools.… --- ## [Elasticsearch 2.4.0 Release?](https://discuss.elastic.co/t/elasticsearch-2-4-0-release/59329)
**Author:** [@turp1twin](https://discuss.elastic.co/u/turp1twin)\ **Replies:** 2\ **Last updated:** [September 9, 2016, 6:25pm UTC](https://discuss.elastic.co/t/elasticsearch-2-4-0-release/59329 "2016-09-09T18:25:31Z")
In reference to issue https://github.com/elastic/elasticsearch/issues/17956 (Allow adding additional child types referring to the same parent #17956). The fix was added some time back in to the 2.4.0 branch. Is this goin… --- ## [Fwd: Handling live updates while reindexing data](https://discuss.elastic.co/t/fwd-handling-live-updates-while-reindexing-data/59212)
**Author:** [@Prannoy\_Mittal](https://discuss.elastic.co/u/Prannoy_Mittal)\ **Replies:** 2\ **Last updated:** [September 1, 2016, 6:11am UTC](https://discuss.elastic.co/t/fwd-handling-live-updates-while-reindexing-data/59212 "2016-09-01T06:11:17Z")
Hi , I have gone through link https://www.elastic.co/blog/changing-mapping-with-zero-downtime for reindexing with zero downtime. There is no information for handling live updates going on into old index. Solution … --- ## [Error while sniffing](https://discuss.elastic.co/t/error-while-sniffing/180978)
**Author:** [@avinash\_07](https://discuss.elastic.co/u/avinash_07)\ **Replies:** 2\ **Last updated:** [May 20, 2019, 1:50pm UTC](https://discuss.elastic.co/t/error-while-sniffing/180978 "2019-05-20T13:50:21Z")
Getting the following error when I am trying to use sniff. Can someone help me fix it? Elasticsearch version - 6.1.2 Client - Java high level rest client \[nt\_sniffer\[T#1\]\] org.elasticsearch.client.sniff.Sniffer : erro… --- ## [Python script for reindex](https://discuss.elastic.co/t/python-script-for-reindex/173040)
**Author:** [@He\_Pamela](https://discuss.elastic.co/u/He_Pamela)\ **Replies:** 2\ **Last updated:** [March 19, 2019, 7:31pm UTC](https://discuss.elastic.co/t/python-script-for-reindex/173040 "2019-03-19T19:31:52Z")
Hi, I want to make a python script to reindex the data from nodeA to nodeB. I want to send the credentials through the request. Somebody nows how to do this? I've seen a elasticsearch-py library but I don\`t know If this… --- ## [Logstash Log: Could not retrieve remote IP address for beats input](https://discuss.elastic.co/t/logstash-log-could-not-retrieve-remote-ip-address-for-beats-input/133280)
**Author:** [@Maekee](https://discuss.elastic.co/u/Maekee)\ **Replies:** 2\ **Last updated:** [June 14, 2018, 7:05pm UTC](https://discuss.elastic.co/t/logstash-log-could-not-retrieve-remote-ip-address-for-beats-input/133280 "2018-06-14T19:05:55Z")
Hi, Need help! All of a sudden i started getting these in my Logstash log... ALOT!! Like 2 every millisecond I see that events are coming in from my beat agents, but not in the pace i usually see. Have not changed an… --- ## [Kibana try connect to port 9200 instead the default protocol port (80 or 443)](https://discuss.elastic.co/t/kibana-try-connect-to-port-9200-instead-the-default-protocol-port-80-or-443/132597)
**Author:** [@mcortinas](https://discuss.elastic.co/u/mcortinas)\ **Replies:** 2\ **Last updated:** [May 20, 2018, 7:41pm UTC](https://discuss.elastic.co/t/kibana-try-connect-to-port-9200-instead-the-default-protocol-port-80-or-443/132597 "2018-05-20T19:41:53Z")
Hello, We're using ES6.2.4 stack over mesos platform. We use marathon and marathon-lb (GitHub - mesosphere/marathon-lb: Marathon-lb is a service discovery & load balancing tool for DC/OS) project in order to orchestra… --- ## [Elaticsearch service doesn't start automatically (Windows)](https://discuss.elastic.co/t/elaticsearch-service-doesnt-start-automatically-windows/112433)
**Author:** [@teejayuu](https://discuss.elastic.co/u/teejayuu)\ **Replies:** 2\ **Last updated:** [December 19, 2017, 11:06pm UTC](https://discuss.elastic.co/t/elaticsearch-service-doesnt-start-automatically-windows/112433 "2017-12-19T23:06:18Z")
Trying to install ES to a Windows 2012 R2 server from a zip file following https://www.elastic.co/guide/en/elasticsearch/reference/current/zip-windows.html. Have set the logs and data folder to a separate location and a… --- ## [Logstash can not reach ElasticSearch](https://discuss.elastic.co/t/logstash-can-not-reach-elasticsearch/51363)
**Author:** [@xueliang](https://discuss.elastic.co/u/xueliang)\ **Replies:** 2\ **Last updated:** [May 31, 2016, 3:29am UTC](https://discuss.elastic.co/t/logstash-can-not-reach-elasticsearch/51363 "2016-05-31T03:29:52Z")
I just try to use logstash to ship the log(json formate data) to elasticsearch. But I get an strange error my elasticsearch work correctly and logstash itself work correctly,but together do not work. The input and filt… --- ## [Primary shard size problem](https://discuss.elastic.co/t/primary-shard-size-problem/65693)
**Author:** [@L8apex32](https://discuss.elastic.co/u/L8apex32)\ **Replies:** 5\ **Last updated:** [November 14, 2016, 7:30pm UTC](https://discuss.elastic.co/t/primary-shard-size-problem/65693 "2016-11-14T19:30:29Z")
It looks like, sometimes, a primary shard will be too large. This is before and after replication. Let me explain. We create an index every hour. Each index has 13 primary shards, replication set to 0. These shards a… --- ## [Installing LogStash 2.2.2 failed on Windows Server 2012](https://discuss.elastic.co/t/installing-logstash-2-2-2-failed-on-windows-server-2012/42777)
**Author:** [@eso](https://discuss.elastic.co/u/eso)\ **Replies:** 5\ **Last updated:** [February 26, 2016, 7:09pm UTC](https://discuss.elastic.co/t/installing-logstash-2-2-2-failed-on-windows-server-2012/42777 "2016-02-26T19:09:55Z")
Hello, When I installed LogStash 2.2.2 (in Program Files folder), I got the following error messages: bin/plugin install logstash-input-beats Unable to download data from https://rubygems.org - SocketError: initi… --- ## [Need help for a mapping definition](https://discuss.elastic.co/t/need-help-for-a-mapping-definition/39024)
**Author:** [@jhb](https://discuss.elastic.co/u/jhb)\ **Replies:** 5\ **Last updated:** [January 21, 2016, 2:44pm UTC](https://discuss.elastic.co/t/need-help-for-a-mapping-definition/39024 "2016-01-21T14:44:15Z")
Hi, I'm using Elasticsearch 1.5, here is a sample of what I'm trying to index: { "Id":"000000a6aOO4T2iA", "CreatedDate":"2016-01-12T14:13:33.285Z", "ModifiedDate":"2016-01-12T14:13:33.285Z", "Segment":"not-applica… --- ## [Scrolling using low-level .NET driver](https://discuss.elastic.co/t/scrolling-using-low-level-net-driver/227568)
**Author:** [@djmarcus](https://discuss.elastic.co/u/djmarcus)\ **Replies:** 1\ **Last updated:** [April 13, 2020, 6:23am UTC](https://discuss.elastic.co/t/scrolling-using-low-level-net-driver/227568 "2020-04-13T06:23:44Z")
I am a real newbie to elasticsearch :frowning: I'm at a the stage where I copy & paste and try to intelligently edit source code in examples I can find. I'm having a very hard time find .NET examples for scrolling thoug… --- ## [Role permissions to read \`.monitoring-\*\` indices?](https://discuss.elastic.co/t/role-permissions-to-read-monitoring-indices/208241)
**Author:** [@IamaBase](https://discuss.elastic.co/u/IamaBase)\ **Replies:** 1\ **Last updated:** [November 18, 2019, 2:19am UTC](https://discuss.elastic.co/t/role-permissions-to-read-monitoring-indices/208241 "2019-11-18T02:19:13Z")
I want to read the .monitoring-\* indices (provided by x-pack) within Grafana. What privileges do I need to grant the grafana user role? I have tried creating a role that allows read and read\_cross\_cluster to the index p… --- ## [Threatintel module filebeat](https://discuss.elastic.co/t/threatintel-module-filebeat/317858)
**Author:** [@emmanuel\_stevens\_LED](https://discuss.elastic.co/u/emmanuel_stevens_LED)\ **Replies:** 6\ **Last updated:** [November 18, 2022, 4:25pm UTC](https://discuss.elastic.co/t/threatintel-module-filebeat/317858 "2022-11-18T16:25:07Z")
Hello, I activate the theatintel module for filebeat but still doesn t get any datas i have this in my logs ''' Nov 1 03:00:02 hostname filebeat\[560069\]: {"log.level":"info","@timestamp":"2022-11-01T03:00:02.308Z"… --- ## [Random access pagination with search\_after on Elasticsearch](https://discuss.elastic.co/t/random-access-pagination-with-search-after-on-elasticsearch/346203)
**Author:** [@cerenimo](https://discuss.elastic.co/u/cerenimo)\ **Replies:** 6\ **Last updated:** [November 2, 2023, 11:51am UTC](https://discuss.elastic.co/t/random-access-pagination-with-search-after-on-elasticsearch/346203 "2023-11-02T11:51:18Z")
There are more than 10 thousand documents in my index, but I cannot access all documents with search. I may also have performance problems with the scroll API. I found a method on how to overcome this with search\_after i… --- ## [How to set ElasticSearch Apm Server indexing template as YYYY.mm?](https://discuss.elastic.co/t/how-to-set-elasticsearch-apm-server-indexing-template-as-yyyy-mm/177811)
**Author:** [@Yusuf\_Karatoprak](https://discuss.elastic.co/u/Yusuf_Karatoprak)\ **Replies:** 6\ **Last updated:** [April 23, 2019, 8:59am UTC](https://discuss.elastic.co/t/how-to-set-elasticsearch-apm-server-indexing-template-as-yyyy-mm/177811 "2019-04-23T08:59:18Z")
I just created Apm server it looks awesome but Indexing like that"Apm-6.6.2-2019.04.19" doesn't make sense because I will have at the end of the month 30 logs. I want to use change "apm-%{\[beat.version\]}-%{+yyyy.MM}" ins… [Previous page](https://discuss.elastic.co/top.md?page=1083&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1085&per_page=50&period=all)