# Top **URL:** https://discuss.elastic.co/top.md?page=1089&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1090 --- ## [Metricbeat - error getting group status: open /proc/\/cgroup](https://discuss.elastic.co/t/metricbeat-error-getting-group-status-open-proc-pid-cgroup/264355)
**Author:** [@anoopkv](https://discuss.elastic.co/u/anoopkv)\ **Replies:** 2\ **Last updated:** [March 3, 2021, 6:34am UTC](https://discuss.elastic.co/t/metricbeat-error-getting-group-status-open-proc-pid-cgroup/264355 "2021-03-03T06:34:21Z")
I have an ELK stack setup in a K8s cluster with security enabled. All components are working fine Installed metricbeat and kube-state-metrics using helm charts, and the containers are not starting, and i see the follow… --- ## [Cannot read property '2' of undefined](https://discuss.elastic.co/t/cannot-read-property-2-of-undefined/210900)
**Author:** [@sai\_kiran1](https://discuss.elastic.co/u/sai_kiran1)\ **Replies:** 2\ **Last updated:** [December 6, 2019, 7:07pm UTC](https://discuss.elastic.co/t/cannot-read-property-2-of-undefined/210900 "2019-12-06T19:07:41Z")
When I open a visualization I see the following error : Cannot read property '2' of undefined Note that when I login with superuser, visualization works fine. --- ## [How to monitor the resource usage of filebeat?](https://discuss.elastic.co/t/how-to-monitor-the-resource-usage-of-filebeat/75001)
**Author:** [@Suin\_You](https://discuss.elastic.co/u/Suin_You)\ **Replies:** 2\ **Last updated:** [February 15, 2017, 1:03am UTC](https://discuss.elastic.co/t/how-to-monitor-the-resource-usage-of-filebeat/75001 "2017-02-15T01:03:47Z")
I want to monitor the resource usage of filebeat like CPU, memory usage, and etc. I know that recently released x-pack can monitor logstash and wonder if it is possible to filebeat. How could I do? Do I use the OS tool… --- ## [Mapping Problem while Update Mapping in existing index](https://discuss.elastic.co/t/mapping-problem-while-update-mapping-in-existing-index/52858)
**Author:** [@Rajkumar\_E](https://discuss.elastic.co/u/Rajkumar_E)\ **Replies:** 2\ **Last updated:** [June 21, 2016, 2:20pm UTC](https://discuss.elastic.co/t/mapping-problem-while-update-mapping-in-existing-index/52858 "2016-06-21T14:20:45Z")
I am working on EFK , I pushed mysql data to elasticsearch. I need to update mapping for existing index. This is Mapping Value: { "chatdemo3": { "mappings": { "chatdemoc": { … --- ## [How could i see my kibana dashboard in my cell phone?](https://discuss.elastic.co/t/how-could-i-see-my-kibana-dashboard-in-my-cell-phone/50521)
**Author:** [@prakashkumar](https://discuss.elastic.co/u/prakashkumar)\ **Replies:** 2\ **Last updated:** [May 20, 2016, 6:20am UTC](https://discuss.elastic.co/t/how-could-i-see-my-kibana-dashboard-in-my-cell-phone/50521 "2016-05-20T06:20:59Z")
i made one dashboard on kibana and i wish to see on my mobile phone ,is it possible? --- ## [How many swap files are created when you update a text file](https://discuss.elastic.co/t/how-many-swap-files-are-created-when-you-update-a-text-file/197625)
**Author:** [@zeno](https://discuss.elastic.co/u/zeno)\ **Replies:** 8\ **Last updated:** [September 26, 2019, 7:16am UTC](https://discuss.elastic.co/t/how-many-swap-files-are-created-when-you-update-a-text-file/197625 "2019-09-26T07:16:18Z")
I want to know how many swap files are created in kibana for Ubuntu server when you create a text file using nano. i see 4 swap files deleted when i deleted the text file i have created in Ubuntu. Similarly the no of swa… --- ## [Multiple clusters for hot warm architecture](https://discuss.elastic.co/t/multiple-clusters-for-hot-warm-architecture/155843)
**Author:** [@Mugen](https://discuss.elastic.co/u/Mugen)\ **Replies:** 8\ **Last updated:** [November 14, 2018, 10:01pm UTC](https://discuss.elastic.co/t/multiple-clusters-for-hot-warm-architecture/155843 "2018-11-14T22:01:22Z")
Hi Guys, We are currently planning on expanding our elasticsearch cluster. We have two options : Option 1 : Create one big cluster (about 10 nodes) with hot warm architecture. Option 2 : Create multiple clusters (on… --- ## [Multitenant ElasticSearch](https://discuss.elastic.co/t/multitenant-elasticsearch/88362)
**Author:** [@Giuseppe\_Merlo](https://discuss.elastic.co/u/Giuseppe_Merlo)\ **Replies:** 8\ **Last updated:** [June 6, 2017, 9:48am UTC](https://discuss.elastic.co/t/multitenant-elasticsearch/88362 "2017-06-06T09:48:17Z")
Hi forum. I want use Elasticsearch for collecting data and i want that my users can't access other users' data. In other words, i want make accounting access for my users. How can i make that? Thanks you all! --- ## [After restart, logstash doesn't read only new files](https://discuss.elastic.co/t/after-restart-logstash-doesnt-read-only-new-files/292012)
**Author:** [@khouloud](https://discuss.elastic.co/u/khouloud)\ **Replies:** 6\ **Last updated:** [December 16, 2021, 1:12pm UTC](https://discuss.elastic.co/t/after-restart-logstash-doesnt-read-only-new-files/292012 "2021-12-16T13:12:12Z")
Hello, is it possible when we stop and restart logstash doesn't read all the files that match the path from the beginning and read only new files appended? --- ## [Will my LDAP integration stop working when my Platinum license expires and enters in degraded mode?](https://discuss.elastic.co/t/will-my-ldap-integration-stop-working-when-my-platinum-license-expires-and-enters-in-degraded-mode/238940)
**Author:** [@alexmm](https://discuss.elastic.co/u/alexmm)\ **Replies:** 6\ **Last updated:** [August 5, 2020, 8:03am UTC](https://discuss.elastic.co/t/will-my-ldap-integration-stop-working-when-my-platinum-license-expires-and-enters-in-degraded-mode/238940 "2020-08-05T08:03:58Z")
In in this topic I asked about if my LDAP integration would stop working if my Platinum license expires. I got a good answer but actually, I think it was not what I expected. The answer was more about what would happen… --- ## [GROK filter is not parsing the windows firewall logs for ICMP traffic](https://discuss.elastic.co/t/grok-filter-is-not-parsing-the-windows-firewall-logs-for-icmp-traffic/228011)
**Author:** [@Prabhu\_Chinnasamy](https://discuss.elastic.co/u/Prabhu_Chinnasamy)\ **Replies:** 6\ **Last updated:** [April 20, 2020, 7:05pm UTC](https://discuss.elastic.co/t/grok-filter-is-not-parsing-the-windows-firewall-logs-for-icmp-traffic/228011 "2020-04-20T19:05:32Z")
All, I am sending the windows firewall logs to logstash and created a GROK filter to parse the log. my GROK filter is: "%{TIMESTAMP\_ISO8601:TimeStamp} %{WORD:Action} %{WORD:Protocol} %{IP:Source\_IP} %{IP:Destination\_I… --- ## [Logstash.agent successfully started logstash enpoint port 9600](https://discuss.elastic.co/t/logstash-agent-successfully-started-logstash-enpoint-port-9600/213542)
**Author:** [@Yasso](https://discuss.elastic.co/u/Yasso)\ **Replies:** 6\ **Last updated:** [January 2, 2020, 3:33pm UTC](https://discuss.elastic.co/t/logstash-agent-successfully-started-logstash-enpoint-port-9600/213542 "2020-01-02T15:33:30Z")
hello guys i'm facing a problem .. logstrash can not load data to elasticsearch i'm using my own config file ..and it seems ok for me ..when i run it ..it shows no error but the end point is port 9600 instead of 9200 … --- ## [SQL Like join on elasticsearch - Help](https://discuss.elastic.co/t/sql-like-join-on-elasticsearch-help/211367)
**Author:** [@mindbee](https://discuss.elastic.co/u/mindbee)\ **Replies:** 6\ **Last updated:** [December 17, 2019, 2:13pm UTC](https://discuss.elastic.co/t/sql-like-join-on-elasticsearch-help/211367 "2019-12-17T14:13:54Z")
Hi, I need help on the elastic search query where it can join on the transaction id on same index. I know the joins are available/allowed on elastic search. Below is the example of my elasticsearch index. (Test index) i… --- ## [How can i get separate email for distinct services in logs by single watcher](https://discuss.elastic.co/t/how-can-i-get-separate-email-for-distinct-services-in-logs-by-single-watcher/173136)
**Author:** [@akpandy](https://discuss.elastic.co/u/akpandy)\ **Replies:** 6\ **Last updated:** [March 22, 2019, 12:35pm UTC](https://discuss.elastic.co/t/how-can-i-get-separate-email-for-distinct-services-in-logs-by-single-watcher/173136 "2019-03-22T12:35:32Z")
Hi, I am new to ELK, I am having single log file where all service failure gets logged. Can i create a single watcher to generate multiple alert for each service failure. For example: If i have failure for serviceA, s… --- ## [How to prevent logs missing](https://discuss.elastic.co/t/how-to-prevent-logs-missing/117157)
**Author:** [@cwt](https://discuss.elastic.co/u/cwt)\ **Replies:** 6\ **Last updated:** [February 27, 2018, 5:18pm UTC](https://discuss.elastic.co/t/how-to-prevent-logs-missing/117157 "2018-02-27T17:18:37Z")
Hi folks, Please share your experience and tips, how to protect from losing logs, when the Logstash or Elastic falls. RabbitMQ? Redis? I have one standalone ELK stack. Thank you --- ## [How to get the logs from Cloud windows server to vmware ubuntu 14 ELK server](https://discuss.elastic.co/t/how-to-get-the-logs-from-cloud-windows-server-to-vmware-ubuntu-14-elk-server/82707)
**Author:** [@onlybalu](https://discuss.elastic.co/u/onlybalu)\ **Replies:** 6\ **Last updated:** [April 18, 2017, 3:17pm UTC](https://discuss.elastic.co/t/how-to-get-the-logs-from-cloud-windows-server-to-vmware-ubuntu-14-elk-server/82707 "2017-04-18T15:17:49Z")
Hi Team, How to get the logs from Cloud windows server to vmware ubuntu 14 ELK server..... Its very urgent basis.... --- ## [Reindex & Missing Documents](https://discuss.elastic.co/t/reindex-missing-documents/95472)
**Author:** [@todd-bowles-console](https://discuss.elastic.co/u/todd-bowles-console)\ **Replies:** 1\ **Last updated:** [August 2, 2017, 7:35am UTC](https://discuss.elastic.co/t/reindex-missing-documents/95472 "2017-08-02T07:35:44Z")
I’ve got a fairly stock standard ELK stack with a bunch of data in it. We control our field mappings, and sometimes we add a new mapping. Obviously old indexes aren’t searchable on that new mapping, so I’d like to start… --- ## [How can I get a date histogram cumulative cardinality?](https://discuss.elastic.co/t/how-can-i-get-a-date-histogram-cumulative-cardinality/58067)
**Author:** [@Andre\_Leite](https://discuss.elastic.co/u/Andre_Leite)\ **Replies:** 1\ **Last updated:** [August 15, 2016, 9:54pm UTC](https://discuss.elastic.co/t/how-can-i-get-a-date-histogram-cumulative-cardinality/58067 "2016-08-15T21:54:47Z")
I would like to know how could I get the cumulative cardinality of a field in a date histogram, I managed to get the cardinality in a date histogram but the cardinality of each bucket only accounts for the cardinality fo… --- ## [Unable to build custom beat](https://discuss.elastic.co/t/unable-to-build-custom-beat/244915)
**Author:** [@sdndude](https://discuss.elastic.co/u/sdndude)\ **Replies:** 4\ **Last updated:** [September 10, 2020, 10:49am UTC](https://discuss.elastic.co/t/unable-to-build-custom-beat/244915 "2020-09-10T10:49:05Z")
I am trying to follow the instructions building the countbeat example here on Ubuntu 18.04 but am not having much luck. After figuring out that the mage instructions are wrong, I was able to get past that by building it… --- ## [Help troubleshooting tcp input](https://discuss.elastic.co/t/help-troubleshooting-tcp-input/172214)
**Author:** [@reswob](https://discuss.elastic.co/u/reswob)\ **Replies:** 4\ **Last updated:** [March 14, 2019, 7:35pm UTC](https://discuss.elastic.co/t/help-troubleshooting-tcp-input/172214 "2019-03-14T19:35:35Z")
I have a simple conf file: input { tcp { port =\> 2000 } } filter { } output { stdout { coded =\> rubydebug } } That's it. I'm using nifi putTCP to send the logs. I see the logs come i… --- ## [Error while installing X-pack on Kibana](https://discuss.elastic.co/t/error-while-installing-x-pack-on-kibana/132348)
**Author:** [@applicate](https://discuss.elastic.co/u/applicate)\ **Replies:** 4\ **Last updated:** [May 18, 2018, 5:24am UTC](https://discuss.elastic.co/t/error-while-installing-x-pack-on-kibana/132348 "2018-05-18T05:24:57Z")
bin/kibana-plugin install x-pack fs.js:642 return binding.open(pathModule.\_makeLong(path), stringToFlags(flags), mode); ^ Error: EACCES: permission denied, open '/usr/share/kibana/optimize/.babelcache.json' at Error… --- ## [Future of conf.d Directory](https://discuss.elastic.co/t/future-of-conf-d-directory/39788)
**Author:** [@pcfens](https://discuss.elastic.co/u/pcfens)\ **Replies:** 4\ **Last updated:** [June 17, 2017, 7:02pm UTC](https://discuss.elastic.co/t/future-of-conf-d-directory/39788 "2017-06-17T19:02:36Z")
I noticed that sometime recently mentions of the conf.d directory was pulled out of the documentation. Is this being deprecated? We prefer using the conf.d directory, but don't want to continue doing it if the plan is … --- ## [Index template creation not working](https://discuss.elastic.co/t/index-template-creation-not-working/40328)
**Author:** [@r.ganeshbabu](https://discuss.elastic.co/u/r.ganeshbabu)\ **Replies:** 4\ **Last updated:** [January 28, 2016, 9:27am UTC](https://discuss.elastic.co/t/index-template-creation-not-working/40328 "2016-01-28T09:27:59Z")
Hi All, I have a problem in creating index templates which seems not working for me I couldn't find where I made mistake. I created a sample index template with settings & new mapping as like as follows.. After that I… --- ## [Race condition when retrieving the mapping immediately after creating a document that contains a new field](https://discuss.elastic.co/t/race-condition-when-retrieving-the-mapping-immediately-after-creating-a-document-that-contains-a-new-field/22481)
**Author:** [@Andrew\_Pak](https://discuss.elastic.co/u/Andrew_Pak)\ **Replies:** 4\ **Last updated:** [March 4, 2015, 10:22pm UTC](https://discuss.elastic.co/t/race-condition-when-retrieving-the-mapping-immediately-after-creating-a-document-that-contains-a-new-field/22481 "2015-03-04T22:22:06Z")
Hello! Here's my issue: I create an index with a mapping that has a dynamic template. I create a new document that contains a new field that will match a dynamic template in the mapping and that will be added to the … --- ## [Sort doesn't work on a "not\_analyzed" field?](https://discuss.elastic.co/t/sort-doesnt-work-on-a-not-analyzed-field/8588)
**Author:** [@Josh\_Hyde](https://discuss.elastic.co/u/Josh_Hyde)\ **Replies:** 4\ **Last updated:** [August 2, 2012, 2:42pm UTC](https://discuss.elastic.co/t/sort-doesnt-work-on-a-not-analyzed-field/8588 "2012-08-02T14:42:08Z")
I have a mapping : { "default":{ "properties":{ "EVENT\_KEY":{ "type":"multi\_field", "fields":{ "EVENT\_KEY":{ "type":"string", … --- ## [Alternate to multi-terms aggregation in transform](https://discuss.elastic.co/t/alternate-to-multi-terms-aggregation-in-transform/309344)
**Author:** [@Robina\_Dhingra1](https://discuss.elastic.co/u/Robina_Dhingra1)\ **Replies:** 5\ **Last updated:** [July 14, 2022, 8:10am UTC](https://discuss.elastic.co/t/alternate-to-multi-terms-aggregation-in-transform/309344 "2022-07-14T08:10:46Z")
Hello Team ES, We have a use case where this transform works well for us.- PUT \_transform/tradebystatus { "source": { "index": \[ "latest-transactions" \] }, "pivot": { "group\_by": { "tradeD… --- ## [Delete Elasticsearch Indices older than 2 months](https://discuss.elastic.co/t/delete-elasticsearch-indices-older-than-2-months/124560)
**Author:** [@vishu.kolki](https://discuss.elastic.co/u/vishu.kolki)\ **Replies:** 5\ **Last updated:** [March 20, 2018, 4:38am UTC](https://discuss.elastic.co/t/delete-elasticsearch-indices-older-than-2-months/124560 "2018-03-20T04:38:21Z")
Hi Team, I want to delete the elastic search indices older than 2 months. Can you please help me how can i do that? My Elasticsearch version is 2.4.1. Thanks --- ## [Filebeats not sending all logs from file](https://discuss.elastic.co/t/filebeats-not-sending-all-logs-from-file/104137)
**Author:** [@SalmaanP](https://discuss.elastic.co/u/SalmaanP)\ **Replies:** 5\ **Last updated:** [October 24, 2017, 11:49am UTC](https://discuss.elastic.co/t/filebeats-not-sending-all-logs-from-file/104137 "2017-10-24T11:49:26Z")
Hi, I have csv file which is generated every monday. The file is being overwritten every time. Filebeats is monitoring that file and sending it to kafka. It has a weird case where sometimes it sends all the logs, but a f… --- ## [Creating a time-based chart which scales from 1y to seconds](https://discuss.elastic.co/t/creating-a-time-based-chart-which-scales-from-1y-to-seconds/56340)
**Author:** [@3ygun](https://discuss.elastic.co/u/3ygun)\ **Replies:** 5\ **Last updated:** [July 25, 2016, 11:54pm UTC](https://discuss.elastic.co/t/creating-a-time-based-chart-which-scales-from-1y-to-seconds/56340 "2016-07-25T23:54:16Z")
Resolved - 8/3/2016 Used a bar chart instead of line chart (see below) Why? Same functionality Avoids the fact that lines need more than 1 data point (geometry :frowning:) bars do not :smile: Original Question I'm… --- ## [How to map a (filebeat) numeric field to display a customer name?](https://discuss.elastic.co/t/how-to-map-a-filebeat-numeric-field-to-display-a-customer-name/47837)
**Author:** [@dgans](https://discuss.elastic.co/u/dgans)\ **Replies:** 5\ **Last updated:** [April 21, 2016, 5:37am UTC](https://discuss.elastic.co/t/how-to-map-a-filebeat-numeric-field-to-display-a-customer-name/47837 "2016-04-21T05:37:40Z")
My filebeat client is sending data records with a numeric field name of 'accountID' to my elasticsearch server. When I create a (Kibana) visualization with this data, my graphs show the numberic 'accountID' values on th… --- ## [Timezone problem, data displayed in the future](https://discuss.elastic.co/t/timezone-problem-data-displayed-in-the-future/157665)
**Author:** [@Nanolike](https://discuss.elastic.co/u/Nanolike)\ **Replies:** 3\ **Last updated:** [November 22, 2018, 11:14am UTC](https://discuss.elastic.co/t/timezone-problem-data-displayed-in-the-future/157665 "2018-11-22T11:14:59Z")
Hi ! I'm new to Kibana and I looked for an answer but found nothing although this seems to be a popular topic. I'm in France (UTC+1) and using Filebeat. The problem is when a log is sent, say at 9:30 AM kibana shows i… --- ## [Drop down menu](https://discuss.elastic.co/t/drop-down-menu/110153)
**Author:** [@mad-max](https://discuss.elastic.co/u/mad-max)\ **Replies:** 3\ **Last updated:** [December 6, 2017, 11:00am UTC](https://discuss.elastic.co/t/drop-down-menu/110153 "2017-12-06T11:00:40Z")
Hello to all. I'd like to make a drop down menu. How can I do it in kibana? Thank you so much for the suggestions you can give me. M --- ## [Elasticsearch static config of action.auto\_create\_index](https://discuss.elastic.co/t/elasticsearch-static-config-of-action-auto-create-index/56545)
**Author:** [@mhughes](https://discuss.elastic.co/u/mhughes)\ **Replies:** 3\ **Last updated:** [August 29, 2016, 9:16am UTC](https://discuss.elastic.co/t/elasticsearch-static-config-of-action-auto-create-index/56545 "2016-08-29T09:16:09Z")
I'm trying to understand the rules governing what I'd best call "static config". As an example, see: action.auto\_create\_index. The docs say: Automatic index creation can be disabled by setting action.auto\_create\_ind… --- ## [Scan and Scroll 100 Index Limit](https://discuss.elastic.co/t/scan-and-scroll-100-index-limit/29819)
**Author:** [@voipoclay](https://discuss.elastic.co/u/voipoclay)\ **Replies:** 3\ **Last updated:** [September 23, 2015, 10:55pm UTC](https://discuss.elastic.co/t/scan-and-scroll-100-index-limit/29819 "2015-09-23T22:55:26Z")
Hello all, I seem to be getting 0 results when my query exceeds 100 shards. Below seems to work but any time shards is greater than 100 it returns nothing. I was wondering if anyone else experienced this? \["took"… --- ## [Elasticsearchでの１ホスト複数ノード設定](https://discuss.elastic.co/t/elasticsearch/263218)
**Author:** [@vavan](https://discuss.elastic.co/u/vavan)\ **Replies:** 2\ **Last updated:** [February 18, 2021, 11:55pm UTC](https://discuss.elastic.co/t/elasticsearch/263218 "2021-02-18T23:55:51Z")
現在、 elasticsearch 7.8.1でサービスを構築していますが、訳あって１インスタンスしかサーバが用意できず、その中でも対障害性を高める設定ができないか考えています。 せめてストレージの故障を回避するために、１ホスト、１クラスタ でも同一ホスト上に複数ノードを作成する前提で下記を考えています。 (1) 各ノードの data.pathを分ける (2) replica ＝1( 1 以上）にする １ホスト、１ク… --- ## [All Shards Unassigned due to Data Node Restarts](https://discuss.elastic.co/t/all-shards-unassigned-due-to-data-node-restarts/179001)
**Author:** [@tami](https://discuss.elastic.co/u/tami)\ **Replies:** 2\ **Last updated:** [April 30, 2019, 7:12am UTC](https://discuss.elastic.co/t/all-shards-unassigned-due-to-data-node-restarts/179001 "2019-04-30T07:12:10Z")
We are using ElasticSearch version 6.2.4 deployed on kubernetes, with 2 data shards, 3 masters, and 1 replica per shard. All of our shards are currently unassigned and unable to be reassigned. curl -X GET "http://$ES\_H… --- ## [Restoring to a new index](https://discuss.elastic.co/t/restoring-to-a-new-index/170422)
**Author:** [@stecino](https://discuss.elastic.co/u/stecino)\ **Replies:** 2\ **Last updated:** [March 1, 2019, 5:54pm UTC](https://discuss.elastic.co/t/restoring-to-a-new-index/170422 "2019-03-01T17:54:15Z")
Hello, I am running the following command to restore snapshot into a new index I am grabbing quai\_report\_20170628 from the snapshot, and trying to restore to quai\_report\_20170628\_2 curl -XPOST http://localhost:9200/\_s… --- ## [Setting a marker at a specific timestamp?](https://discuss.elastic.co/t/setting-a-marker-at-a-specific-timestamp/103883)
**Author:** [@asp](https://discuss.elastic.co/u/asp)\ **Replies:** 2\ **Last updated:** [October 16, 2017, 6:47am UTC](https://discuss.elastic.co/t/setting-a-marker-at-a-specific-timestamp/103883 "2017-10-16T06:47:03Z")
Hi, is it possible to set a marker at a specific timestamp? My usecase is the following. I have the data in ES to view the performance of my system. Then I have an event (e.g. database backup) which runs from time x … --- ## [Baseline calculation algorithm](https://discuss.elastic.co/t/baseline-calculation-algorithm/100384)
**Author:** [@Kbb](https://discuss.elastic.co/u/Kbb)\ **Replies:** 2\ **Last updated:** [September 15, 2017, 9:37am UTC](https://discuss.elastic.co/t/baseline-calculation-algorithm/100384 "2017-09-15T09:37:24Z")
Could you please explane me the baseline calculation algorithm. I have a few questions. Is that something like mean value plus and minus standard deviation multiplied by some coefficient (3, for example)? Which ty… --- ## [SQL Server 2012 with Elastic Search 2.2](https://discuss.elastic.co/t/sql-server-2012-with-elastic-search-2-2/44632)
**Author:** [@sreeramg](https://discuss.elastic.co/u/sreeramg)\ **Replies:** 2\ **Last updated:** [March 17, 2016, 1:10am UTC](https://discuss.elastic.co/t/sql-server-2012-with-elastic-search-2-2/44632 "2016-03-17T01:10:25Z")
Anyone has instructions integrating SQL Server data to Elastic Search. Please share step by step instructions for integration from SQL Server to Elastic Search I have tried river plugin ( did not work) Tried to follo… --- ## [I get an EngineClosedException when I am indexing data. My ES's health shows green](https://discuss.elastic.co/t/i-get-an-engineclosedexception-when-i-am-indexing-data-my-ess-health-shows-green/25418)
**Author:** [@sahilc2200](https://discuss.elastic.co/u/sahilc2200)\ **Replies:** 2\ **Last updated:** [January 18, 2016, 9:30am UTC](https://discuss.elastic.co/t/i-get-an-engineclosedexception-when-i-am-indexing-data-my-ess-health-shows-green/25418 "2016-01-18T09:30:10Z")
I need a little bit of help understanding this cryptic issue. While indexing data, it fails and throws this error. I have checked my elasticsearch's health but it shows me that it's running, and it's health is green. I… --- ## [How to utilize Java NodeClient for a cluster running on AWS/EC2](https://discuss.elastic.co/t/how-to-utilize-java-nodeclient-for-a-cluster-running-on-aws-ec2/30076)
**Author:** [@austin\_lee](https://discuss.elastic.co/u/austin_lee)\ **Replies:** 2\ **Last updated:** [October 5, 2015, 2:59pm UTC](https://discuss.elastic.co/t/how-to-utilize-java-nodeclient-for-a-cluster-running-on-aws-ec2/30076 "2015-10-05T14:59:03Z")
So I have a java application that is able to connect to my ES cluster using the Transport client with no problems. Now I'm trying to gauge whether to use the transport or node client. However, I'm not too sure how to c… --- ## [New autoresponder bot enabled](https://discuss.elastic.co/t/new-autoresponder-bot-enabled/294761)
**Author:** [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Replies:** 0\ **Last updated:** [January 19, 2022, 3:52am UTC](https://discuss.elastic.co/t/new-autoresponder-bot-enabled/294761 "2022-01-19T03:52:35Z")
Thanks to the awesome team at Discourse, we've enabled a new autoresponder bot to trial. The idea is to flag any EOL versions of the stack that users may have deployed and post an automated response recommending an upgr… --- ## [Kibana index with custom attributes](https://discuss.elastic.co/t/kibana-index-with-custom-attributes/235466)
**Author:** [@akshatsharma](https://discuss.elastic.co/u/akshatsharma)\ **Replies:** 7\ **Last updated:** [June 5, 2020, 1:58pm UTC](https://discuss.elastic.co/t/kibana-index-with-custom-attributes/235466 "2020-06-05T13:58:44Z")
Hi, Is it possible to create costum attributes while creating kibana index pattern? The goal is to be able to detect an index created with a Kubernetes Operator (among the others created by the Kibana GUI) I tried doi… --- ## [How to run Logstash configuration file Background?](https://discuss.elastic.co/t/how-to-run-logstash-configuration-file-background/136679)
**Author:** [@kartheek91](https://discuss.elastic.co/u/kartheek91)\ **Replies:** 7\ **Last updated:** [June 21, 2018, 10:57am UTC](https://discuss.elastic.co/t/how-to-run-logstash-configuration-file-background/136679 "2018-06-21T10:57:57Z")
Hi All... I have conf file and I need to run for every 5 minutes automatically --- ## [Sudden 100% CPU usage by ElasticSearch](https://discuss.elastic.co/t/sudden-100-cpu-usage-by-elasticsearch/16657)
**Author:** [@Jos\_Kraaijeveld](https://discuss.elastic.co/u/Jos_Kraaijeveld)\ **Replies:** 7\ **Last updated:** [April 3, 2014, 6:21pm UTC](https://discuss.elastic.co/t/sudden-100-cpu-usage-by-elasticsearch/16657 "2014-04-03T18:21:25Z")
At seemingly random intervals, the ElasticSearch Java process starts hogging all CPU on my machine. This is in a two-node cluster where one node is gathering data from other sources and continuously updating the do… --- ## [Elasticsearch Term suggester is not returning correct suggestions when one character is missing (instead of misspelling)](https://discuss.elastic.co/t/elasticsearch-term-suggester-is-not-returning-correct-suggestions-when-one-character-is-missing-instead-of-misspelling/304369)
**Author:** [@hesamrasouli](https://discuss.elastic.co/u/hesamrasouli)\ **Replies:** 4\ **Last updated:** [May 11, 2022, 11:24am UTC](https://discuss.elastic.co/t/elasticsearch-term-suggester-is-not-returning-correct-suggestions-when-one-character-is-missing-instead-of-misspelling/304369 "2022-05-11T11:24:19Z")
I'm using Elasticsearch term suggester for spell correction. my index contains huge list of ads. Each ad has subject and body fields. I've found a problematic example for which the suggester is not suggesting correct sug… --- ## [IntelTwit - Poor Man's Threat Intel](https://discuss.elastic.co/t/inteltwit-poor-mans-threat-intel/126183)
**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\ **Replies:** 4\ **Last updated:** [April 14, 2020, 3:42pm UTC](https://discuss.elastic.co/t/inteltwit-poor-mans-threat-intel/126183 "2020-04-14T15:42:07Z")
This is the newest "fun" project I am working on. The twitter plugin can dump, literally, over 1,000 fields so I've narrowed it down to what I believe is the most relevant and then pulled some of those fields apart for … --- ## [Integrate Events into Elastic SIEM](https://discuss.elastic.co/t/integrate-events-into-elastic-siem/224091)
**Author:** [@david-vazquez](https://discuss.elastic.co/u/david-vazquez)\ **Replies:** 4\ **Last updated:** [March 22, 2020, 6:27pm UTC](https://discuss.elastic.co/t/integrate-events-into-elastic-siem/224091 "2020-03-22T18:27:09Z")
Hello guys, I´m new using ELK Stack. I have been parsing log data from Palo Alto Firewall and Cisco Umbrella by using Logstash to index it into Elasticsearch. It was a difficult task, because I have no experience doing… --- ## [How do I get the Infrastructure map working for Kubernetes Pods?](https://discuss.elastic.co/t/how-do-i-get-the-infrastructure-map-working-for-kubernetes-pods/207731)
**Author:** [@Richard\_Neely](https://discuss.elastic.co/u/Richard_Neely)\ **Replies:** 4\ **Last updated:** [November 19, 2019, 3:09pm UTC](https://discuss.elastic.co/t/how-do-i-get-the-infrastructure-map-working-for-kubernetes-pods/207731 "2019-11-19T15:09:38Z")
All of my pods show up but metrics report as zero. Kube state metrics is running metrics are getting indexed into the metricbeat index. You can also see them on the Discover tab but nothing here. Running 6.8.3 across the… [Previous page](https://discuss.elastic.co/top.md?page=1088&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1090&per_page=50&period=all)