# Top

**URL:** https://discuss.elastic.co/top.md?page=1095&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1096

---

## [APM server not found](https://discuss.elastic.co/t/apm-server-not-found/174235)

<div class="topic-metadata">

**Author:** [@John\_Kim](https://discuss.elastic.co/u/John_Kim)\
**Replies:** 2\
**Last updated:** [March 29, 2019, 4:09am UTC](https://discuss.elastic.co/t/apm-server-not-found/174235 "2019-03-29T04:09:19Z")

</div>

If you are asking about a problem you are experiencing, please use the following template, as it will help us help you. If you have a different problem, please delete all of this text :slight\_smile: Kibana version: 6.4…

---

## [Watcher alert for an scripted field](https://discuss.elastic.co/t/watcher-alert-for-an-scripted-field/169518)

<div class="topic-metadata">

**Author:** [@Alvaro\_Garrido](https://discuss.elastic.co/u/Alvaro_Garrido)\
**Replies:** 2\
**Last updated:** [March 5, 2019, 4:38pm UTC](https://discuss.elastic.co/t/watcher-alert-for-an-scripted-field/169518 "2019-03-05T16:38:12Z")

</div>

Is it possible to set up a Watcher alert for an scripted field overcoming a threshold value? For example, when latency (scripted field for endTime - startTime) overcomes 500 ms, send me an alert

---

## [Can Kibana 6 be used with Elastic 5.6.2?](https://discuss.elastic.co/t/can-kibana-6-be-used-with-elastic-5-6-2/109051)

<div class="topic-metadata">

**Author:** [@javadevmtl](https://discuss.elastic.co/u/javadevmtl)\
**Replies:** 2\
**Last updated:** [November 28, 2017, 1:44am UTC](https://discuss.elastic.co/t/can-kibana-6-be-used-with-elastic-5-6-2/109051 "2017-11-28T01:44:42Z")

</div>

Hi I would like to try the Kibana 6 features... Can I use it with Elastic 5.6.2 provided I create a .kibana6 index and set kibana.index=.kibana6?

---

## [Grants to see only Dashboard in Kibana](https://discuss.elastic.co/t/grants-to-see-only-dashboard-in-kibana/68863)

<div class="topic-metadata">

**Author:** [@olorasde](https://discuss.elastic.co/u/olorasde)\
**Replies:** 2\
**Last updated:** [December 23, 2016, 7:34am UTC](https://discuss.elastic.co/t/grants-to-see-only-dashboard-in-kibana/68863 "2016-12-23T07:34:27Z")

</div>

Hi, I am trying to configure a dashboard in kibana that can only be queried by a certain user group. The idea is to use a permissions setting on the .kibana index and the data index on which I built the dashboard with …

---

## [Debugging csv output](https://discuss.elastic.co/t/debugging-csv-output/64901)

<div class="topic-metadata">

**Author:** [@mehulved](https://discuss.elastic.co/u/mehulved)\
**Replies:** 2\
**Last updated:** [November 5, 2016, 1:27pm UTC](https://discuss.elastic.co/t/debugging-csv-output/64901 "2016-11-05T13:27:46Z")

</div>

I downloaded logstash 5.0.0 today and set it up to work with the configuration file from 2.4.0. Here's what the configuration looks like: input { tcp { port =\> 24224 host =\> "127.0.0.1" mode =\> "server" …

---

## [Timezone offset problem](https://discuss.elastic.co/t/timezone-offset-problem/44845)

<div class="topic-metadata">

**Author:** [@DaveO](https://discuss.elastic.co/u/DaveO)\
**Replies:** 2\
**Last updated:** [March 18, 2016, 5:29pm UTC](https://discuss.elastic.co/t/timezone-offset-problem/44845 "2016-03-18T17:29:18Z")

</div>

I'm having problems setting @timestamp based on the date, time and time zone offset fields from System Center Configuration Manager client logs. After much trial and error, I have narrowed down the problem to the time …

---

## [Whats different with "protocol node" or "protocol http" in logstash output](https://discuss.elastic.co/t/whats-different-with-protocol-node-or-protocol-http-in-logstash-output/29901)

<div class="topic-metadata">

**Author:** [@Jason\_Zheng](https://discuss.elastic.co/u/Jason_Zheng)\
**Replies:** 2\
**Last updated:** [September 25, 2015, 2:15am UTC](https://discuss.elastic.co/t/whats-different-with-protocol-node-or-protocol-http-in-logstash-output/29901 "2015-09-25T02:15:52Z")

</div>

Hi All, https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html In logstash output elasticsearch plugin, there are 3 protocols to talk to elasticsearch, I don't really understand whats d…

---

## [What is better. Monthly Indices or 1 Index with more shards?](https://discuss.elastic.co/t/what-is-better-monthly-indices-or-1-index-with-more-shards/248982)

<div class="topic-metadata">

**Author:** [@defalt](https://discuss.elastic.co/u/defalt)\
**Replies:** 4\
**Last updated:** [September 19, 2020, 6:09am UTC](https://discuss.elastic.co/t/what-is-better-monthly-indices-or-1-index-with-more-shards/248982 "2020-09-19T06:09:07Z")

</div>

Hi, we are currently planning a cluster which takes about 1TB/year worth of data. When using a standard shard size of 5 this would mean that the shards are 250GB. As far as I know shards should only be around 50-70GB at…

---

## [Null\_pointer\_exception](https://discuss.elastic.co/t/null-pointer-exception/218487)

<div class="topic-metadata">

**Author:** [@pawelks](https://discuss.elastic.co/u/pawelks)\
**Replies:** 4\
**Last updated:** [February 10, 2020, 12:31pm UTC](https://discuss.elastic.co/t/null-pointer-exception/218487 "2020-02-10T12:31:07Z")

</div>

Hello. I'm a newbie in elasticsearch and I have a strange elastic search behaviour. Could someone explain me why belowed query sometimes works and sometimes didnt work? This query should for current date found records. I…

---

## [How to write case statement in Where clause](https://discuss.elastic.co/t/how-to-write-case-statement-in-where-clause/197220)

<div class="topic-metadata">

**Author:** [@navjeet.singh](https://discuss.elastic.co/u/navjeet.singh)\
**Replies:** 4\
**Last updated:** [August 30, 2019, 6:10pm UTC](https://discuss.elastic.co/t/how-to-write-case-statement-in-where-clause/197220 "2019-08-30T18:10:13Z")

</div>

Hello Team , i am trying to run the below query but it gives me error as mismatch any idea what i am doing wrong. SELECT \* FROM "chat\_comment" c1 where (c1."createdDate" \>= '2019-08-27' AND c1."createdDate" \<= '20…

---

## [No results found / wildcard via Query Bar](https://discuss.elastic.co/t/no-results-found-wildcard-via-query-bar/117275)

<div class="topic-metadata">

**Author:** [@alexus](https://discuss.elastic.co/u/alexus)\
**Replies:** 4\
**Last updated:** [January 31, 2018, 5:41pm UTC](https://discuss.elastic.co/t/no-results-found-wildcard-via-query-bar/117275 "2018-01-31T17:41:37Z")

</div>

I'm using Query bar (at the top of Kibana) to search like this: bin: 123456\* I get a lot of hits, however when I add filter; bin -\> is -\> 123456\*, I get 0 hits (No results found), bin field contains 6 OR 7 numbers an…

---

## [Ignore shingle tokens when highlighting](https://discuss.elastic.co/t/ignore-shingle-tokens-when-highlighting/115695)

<div class="topic-metadata">

**Author:** [@bslinger](https://discuss.elastic.co/u/bslinger)\
**Replies:** 4\
**Last updated:** [January 22, 2018, 9:18am UTC](https://discuss.elastic.co/t/ignore-shingle-tokens-when-highlighting/115695 "2018-01-22T09:18:24Z")

</div>

I'm using shingles in our index to allow for matches on multi-words when a search using a joined version of the word is entered, eg. to allow 'giantbomb' to match a field with the term 'giant bomb' in it. This is workin…

---

## [Can a transform recalculate if old documents update their values?](https://discuss.elastic.co/t/can-a-transform-recalculate-if-old-documents-update-their-values/272954)

<div class="topic-metadata">

**Author:** [@marcosvrrs](https://discuss.elastic.co/u/marcosvrrs)\
**Replies:** 3\
**Last updated:** [May 14, 2021, 6:51am UTC](https://discuss.elastic.co/t/can-a-transform-recalculate-if-old-documents-update-their-values/272954 "2021-05-14T06:51:44Z")

</div>

Hi all! I have an index that contains millions of documents that have this structure: { id: abc87452 timestamp: 2021-05-13T12:45:13Z client : company\_X value : $ 10000 transaction\_status : authorized } So, I hav…

---

## [RUM / JS APM display results for one page "Unknown"](https://discuss.elastic.co/t/rum-js-apm-display-results-for-one-page-unknown/153311)

<div class="topic-metadata">

**Author:** [@ariel\_k](https://discuss.elastic.co/u/ariel_k)\
**Replies:** 3\
**Last updated:** [October 30, 2018, 3:58pm UTC](https://discuss.elastic.co/t/rum-js-apm-display-results-for-one-page-unknown/153311 "2018-10-30T15:58:38Z")

</div>

Hello, i am trying to use APM with RUM / JS agent. i have installed it and i get data. the problem is that i get data on one page called unknown and the application has a few pages. it seems like the the APM agent ge…

---

## [Threshold coloring](https://discuss.elastic.co/t/threshold-coloring/116830)

<div class="topic-metadata">

**Author:** [@eebee](https://discuss.elastic.co/u/eebee)\
**Replies:** 3\
**Last updated:** [January 25, 2018, 7:53am UTC](https://discuss.elastic.co/t/threshold-coloring/116830 "2018-01-25T07:53:44Z")

</div>

Is there any way in VBTS to change the color of a line in Time Series depending on the value at the time, like one can in the metric part?

---

## [Elasticsearch Transport Client bottle neck with concurrent calls](https://discuss.elastic.co/t/elasticsearch-transport-client-bottle-neck-with-concurrent-calls/65077)

<div class="topic-metadata">

**Author:** [@shivangshah](https://discuss.elastic.co/u/shivangshah)\
**Replies:** 3\
**Last updated:** [November 6, 2016, 8:46pm UTC](https://discuss.elastic.co/t/elasticsearch-transport-client-bottle-neck-with-concurrent-calls/65077 "2016-11-06T20:46:02Z")

</div>

We ran a performance test on my local environment with one node, one index and one shard. The number of TPS was around 60. We started low around 20 to 25 TPS and the 99th percentile was around 100ms which is what he expe…

---

## [Dynamic setting of "cluster.routing.allocation.same\_shard.host: true" is not working](https://discuss.elastic.co/t/dynamic-setting-of-cluster-routing-allocation-same-shard-host-true-is-not-working/45644)

<div class="topic-metadata">

**Author:** [@wq\_Huang](https://discuss.elastic.co/u/wq_Huang)\
**Replies:** 3\
**Last updated:** [October 6, 2016, 5:57am UTC](https://discuss.elastic.co/t/dynamic-setting-of-cluster-routing-allocation-same-shard-host-true-is-not-working/45644 "2016-10-06T05:57:43Z")

</div>

curl -XPUT http://10.110.9.1:9200/\_cluster/settings -d '{ "persistent" : {"cluster.routing.allocation.same\_shard.host": "true"}}' {"acknowledged":true,"persistent":{},"transient":{}} curl -XGET http://10.110.9.1:9200…

---

## [Index Mapping Templates and sustainable practices](https://discuss.elastic.co/t/index-mapping-templates-and-sustainable-practices/50863)

<div class="topic-metadata">

**Author:** [@whyapenny](https://discuss.elastic.co/u/whyapenny)\
**Replies:** 3\
**Last updated:** [May 27, 2016, 11:18am UTC](https://discuss.elastic.co/t/index-mapping-templates-and-sustainable-practices/50863 "2016-05-27T11:18:37Z")

</div>

Wasn't sure whether to post this question in Logstash forum or ElasticSearch since it can technically be in either. Scenario: Multiple applications logging to a single ELK stack. Each application's logs will differ i…

---

## [Creating a filebeat module](https://discuss.elastic.co/t/creating-a-filebeat-module/287413)

<div class="topic-metadata">

**Author:** [@elasticfran](https://discuss.elastic.co/u/elasticfran)\
**Replies:** 6\
**Last updated:** [October 22, 2021, 2:14pm UTC](https://discuss.elastic.co/t/creating-a-filebeat-module/287413 "2021-10-22T14:14:25Z")

</div>

Hey there! I am trying to write a custom filebeat module, which are the proper guidelines to follow ? Found Creating a New Beat | Beats Developer Guide \[7.12\] | Elastic which i find pretty comprehensive but i wonder wh…

---

## [Why is first index creation each day slower?](https://discuss.elastic.co/t/why-is-first-index-creation-each-day-slower/279096)

<div class="topic-metadata">

**Author:** [@lbarker\_q](https://discuss.elastic.co/u/lbarker_q)\
**Replies:** 6\
**Last updated:** [July 26, 2021, 4:54pm UTC](https://discuss.elastic.co/t/why-is-first-index-creation-each-day-slower/279096 "2021-07-26T16:54:19Z")

</div>

Hello On various Elasticsearch deployments I am finding that the first time I create a document in a new index each day (or at least in a long period of time) the response time is much higher. In these cases the total r…

---

## [151209 (4) - OpenJDK 7 \<= 7u281 / 8 \<= 8u272 / 11.0.0 \<= 11.0.9 / 13.0.0 \<= 13.0.5 / 15.0.0 \<= 15.0.1 Vulnerability (2021-01-19)](https://discuss.elastic.co/t/151209-4-openjdk-7-7u281-8-8u272-11-0-0-11-0-9-13-0-0-13-0-5-15-0-0-15-0-1-vulnerability-2021-01-19/323620)

<div class="topic-metadata">

**Author:** [@khadija70](https://discuss.elastic.co/u/khadija70)\
**Replies:** 7\
**Last updated:** [January 20, 2023, 10:04pm UTC](https://discuss.elastic.co/t/151209-4-openjdk-7-7u281-8-8u272-11-0-0-11-0-9-13-0-0-13-0-5-15-0-0-15-0-1-vulnerability-2021-01-19/323620 "2023-01-20T22:04:22Z")

</div>

Hi , We have receive vulnerabilities affecting elasticksearch servers : 151209 (4) - OpenJDK 7 \<= 7u281 / 8 \<= 8u272 / 11.0.0 \<= 11.0.9 / 13.0.0 \<= 13.0.5 / 15.0.0 \<= 15.0.1 Vulnerability (2021-01-19) The solution pr…

---

## [Error fetching data for metricset kubernetes.node, DNS lookup failed on AKS](https://discuss.elastic.co/t/error-fetching-data-for-metricset-kubernetes-node-dns-lookup-failed-on-aks/248543)

<div class="topic-metadata">

**Author:** [@Franck3](https://discuss.elastic.co/u/Franck3)\
**Replies:** 1\
**Last updated:** [September 15, 2020, 6:51am UTC](https://discuss.elastic.co/t/error-fetching-data-for-metricset-kubernetes-node-dns-lookup-failed-on-aks/248543 "2020-09-15T06:51:30Z")

</div>

The metricbeat pod are not able to get metrics from the /stats/summary endpoints on the nodes. Running on AKS version 1.16.10. 2020-09-14T13:35:54.081Z WARN \[transport\] transport/tcp.go:52 DNS lookup failure "aks-agen…

---

## [TSVB Percentage Gauge](https://discuss.elastic.co/t/tsvb-percentage-gauge/221692)

<div class="topic-metadata">

**Author:** [@KoettingSimon](https://discuss.elastic.co/u/KoettingSimon)\
**Replies:** 1\
**Last updated:** [March 23, 2020, 11:11am UTC](https://discuss.elastic.co/t/tsvb-percentage-gauge/221692 "2020-03-23T11:11:56Z")

</div>

Hi All, Im trying my first TSVB-Visualisation. I have 2 diffrent index both have the field id. I want to have the proportion of the count of the field id from index1 to the count of the field id in both indexes So th…

---

## [Create properties with wildcard](https://discuss.elastic.co/t/create-properties-with-wildcard/142685)

<div class="topic-metadata">

**Author:** [@lvinyes](https://discuss.elastic.co/u/lvinyes)\
**Replies:** 7\
**Last updated:** [August 3, 2018, 12:32pm UTC](https://discuss.elastic.co/t/create-properties-with-wildcard/142685 "2018-08-03T12:32:14Z")

</div>

Hi, In a log from CISCO SFR there are two IP (source and destination) and I want to send with logstash to elasticsearch with geoip information. The logstash template in elasticsearch has only one property named geoip, …

---

## [Java-api: SearchHitField usage](https://discuss.elastic.co/t/java-api-searchhitfield-usage/4083)

<div class="topic-metadata">

**Author:** [@K\_B](https://discuss.elastic.co/u/K_B)\
**Replies:** 7\
**Last updated:** [March 12, 2011, 7:49pm UTC](https://discuss.elastic.co/t/java-api-searchhitfield-usage/4083 "2011-03-12T19:49:51Z")

</div>

Hello, when I get back a SearchHit hit, I can get back the fields with hit.getFields(); This leads to a Map where String is the name of the field and SearchHitField actually is an Interface just having: String…

---

## [Docker + elasticsearc +whitelist](https://discuss.elastic.co/t/docker-elasticsearc-whitelist/83504)

<div class="topic-metadata">

**Author:** [@klara\_gogi](https://discuss.elastic.co/u/klara_gogi)\
**Replies:** 2\
**Last updated:** [April 25, 2017, 8:30am UTC](https://discuss.elastic.co/t/docker-elasticsearc-whitelist/83504 "2017-04-25T08:30:31Z")

</div>

Здраствуйте! А я правильно указала удаленый эластик? В elasticsearch.yml : reindex.remote.whitelist: relastic1:9200 не работает для реиндекса Ошибка: \> { "error": { "root\_cause": \[ { …

---

## [How do i prevent the Kibana dashboard filter specific to an index being applied to visualizations from other indices?](https://discuss.elastic.co/t/how-do-i-prevent-the-kibana-dashboard-filter-specific-to-an-index-being-applied-to-visualizations-from-other-indices/79909)

<div class="topic-metadata">

**Author:** [@kiran\_kumar\_sukumar](https://discuss.elastic.co/u/kiran_kumar_sukumar)\
**Replies:** 2\
**Last updated:** [March 24, 2017, 7:13pm UTC](https://discuss.elastic.co/t/how-do-i-prevent-the-kibana-dashboard-filter-specific-to-an-index-being-applied-to-visualizations-from-other-indices/79909 "2017-03-24T19:13:12Z")

</div>

Hi, I have two indexes index1 and index2. I have field1 and field2 in index1 and field3 and field4 in index2. I have some visualizations from index1 and index2 and put in on the same dashboard When i filter for fi…

---

## [Logstash 5 Alpha 4 connection with zookeeper is getting error](https://discuss.elastic.co/t/logstash-5-alpha-4-connection-with-zookeeper-is-getting-error/55421)

<div class="topic-metadata">

**Author:** [@gaurav\_S\_javheri](https://discuss.elastic.co/u/gaurav_S_javheri)\
**Replies:** 2\
**Last updated:** [July 14, 2016, 5:16am UTC](https://discuss.elastic.co/t/logstash-5-alpha-4-connection-with-zookeeper-is-getting-error/55421 "2016-07-14T05:16:10Z")

</div>

Below is configuration to connect to zookeeper server which configured with Kafka 0.10 input { kafka { bootstrap\_servers =\> "zk\_server:2181" topics =\> \['logstash\_log\_2'\] } } output{ …

---

## [ELK stack with poor performance and mysterious client node](https://discuss.elastic.co/t/elk-stack-with-poor-performance-and-mysterious-client-node/28615)

<div class="topic-metadata">

**Author:** [@eacoimbra](https://discuss.elastic.co/u/eacoimbra)\
**Replies:** 2\
**Last updated:** [September 3, 2015, 8:37pm UTC](https://discuss.elastic.co/t/elk-stack-with-poor-performance-and-mysterious-client-node/28615 "2015-09-03T20:37:59Z")

</div>

We began using the ELK stack in our company as an emergency approach when we lose our appliance for log analysis months ago. We do not still completely control ElasticSearch, so we are having difficulty in solving some…

---

## [Unable to start Elasticsearch as single node and for developing](https://discuss.elastic.co/t/unable-to-start-elasticsearch-as-single-node-and-for-developing/261753)

<div class="topic-metadata">

**Author:** [@first100](https://discuss.elastic.co/u/first100)\
**Replies:** 5\
**Last updated:** [January 21, 2021, 4:10pm UTC](https://discuss.elastic.co/t/unable-to-start-elasticsearch-as-single-node-and-for-developing/261753 "2021-01-21T16:10:50Z")

</div>

Hello, i try to install elasticsearch as single node and noi i production mode i have sette in my elastisearch.yml file: cluster.name: elastic-cluster node.name: elastic-cluster-node-1 path.data: C:\\Elastic\\da…

---

## [Can a heavy query cause index corruption?](https://discuss.elastic.co/t/can-a-heavy-query-cause-index-corruption/41799)

<div class="topic-metadata">

**Author:** [@alienmind](https://discuss.elastic.co/u/alienmind)\
**Replies:** 5\
**Last updated:** [February 15, 2016, 9:44pm UTC](https://discuss.elastic.co/t/can-a-heavy-query-cause-index-corruption/41799 "2016-02-15T21:44:01Z")

</div>

Hi I've been running some aggresive tests (on purposely reduced hardware specs) and faced the following issue. My cluster is: ES 2.2.0 on CentOS 6.7 4x nodes with 4GB RAM (2GB for the JVM), 8 cores. Extended the bul…

---

## [Global variable in script?](https://discuss.elastic.co/t/global-variable-in-script/139944)

<div class="topic-metadata">

**Author:** [@Guillaume\_Abautret](https://discuss.elastic.co/u/Guillaume_Abautret)\
**Replies:** 1\
**Last updated:** [July 13, 2018, 6:18pm UTC](https://discuss.elastic.co/t/global-variable-in-script/139944 "2018-07-13T18:18:21Z")

</div>

Hi all, I want to count the number of elements that have distance greater than 10. I don't know how to save the variable that counts. I can't initialize a variable in the script because at each iteration of elements, t…

---

## [Eck-operator error logs](https://discuss.elastic.co/t/eck-operator-error-logs/312459)

<div class="topic-metadata">

**Author:** [@x00m](https://discuss.elastic.co/u/x00m)\
**Replies:** 4\
**Last updated:** [August 23, 2022, 6:00am UTC](https://discuss.elastic.co/t/eck-operator-error-logs/312459 "2022-08-23T06:00:34Z")

</div>

I see a lot of errors coming out of eck operator : This is one instance: E0819 10:51:42.525350 1 leaderelection.go:330\] error retrieving resource lock elastic-system/elastic-operator-leader: leases.coordination.k…

---

## [Heartbeat showing my nodes as down but they are up](https://discuss.elastic.co/t/heartbeat-showing-my-nodes-as-down-but-they-are-up/270406)

<div class="topic-metadata">

**Author:** [@marone](https://discuss.elastic.co/u/marone)\
**Replies:** 4\
**Last updated:** [April 18, 2021, 1:24pm UTC](https://discuss.elastic.co/t/heartbeat-showing-my-nodes-as-down-but-they-are-up/270406 "2021-04-18T13:24:21Z")

</div>

I set up heartbeat with my cluster ELK 7.12 (2 nodes) running on separate VMs, everything working fine, but when I enabled transport ssl and generated certificates for each node, heartbeat keeps showing that my nodes are…

---

## [PDF Chart has vertical and horizontal scrollbars](https://discuss.elastic.co/t/pdf-chart-has-vertical-and-horizontal-scrollbars/69309)

<div class="topic-metadata">

**Author:** [@mmcclaskey](https://discuss.elastic.co/u/mmcclaskey)\
**Replies:** 4\
**Last updated:** [December 20, 2016, 6:53pm UTC](https://discuss.elastic.co/t/pdf-chart-has-vertical-and-horizontal-scrollbars/69309 "2016-12-20T18:53:30Z")

</div>

We have a dashboard with 4 visualizations (2 bar charts, one table, and one timelion chart). The timelion chart appears with horizontal and vertical scrollbars in a PDF report, for no apparent reason (meaning the chart w…

---

## [Continuous Disk Failure in ElasticSearch Nodes in heavy bulk indexing environments](https://discuss.elastic.co/t/continuous-disk-failure-in-elasticsearch-nodes-in-heavy-bulk-indexing-environments/29570)

<div class="topic-metadata">

**Author:** [@moni15moni](https://discuss.elastic.co/u/moni15moni)\
**Replies:** 4\
**Last updated:** [September 22, 2015, 4:57am UTC](https://discuss.elastic.co/t/continuous-disk-failure-in-elasticsearch-nodes-in-heavy-bulk-indexing-environments/29570 "2015-09-22T04:57:04Z")

</div>

Hi All, We have maintained a Production Environment,about 17 TB Data and 40 Billion documents with 10 Boxes(Each have 24 CPU and 64 GB RAM). For late two months we are received,a problematical area , kernel: sd 0…

---

## [\[ANN\] Carrot2 plugin for ES (on-the-fly clustering of search results)](https://discuss.elastic.co/t/ann-carrot2-plugin-for-es-on-the-fly-clustering-of-search-results/12640)

<div class="topic-metadata">

**Author:** [@Dawid\_Weiss](https://discuss.elastic.co/u/Dawid_Weiss)\
**Replies:** 4\
**Last updated:** [July 13, 2013, 3:08am UTC](https://discuss.elastic.co/t/ann-carrot2-plugin-for-es-on-the-fly-clustering-of-search-results/12640 "2013-07-13T03:08:04Z")

</div>

Perhaps it will be of interest to somebody. We have written (and will support) an "official" plugin to support on-the-fly search results clustering (aka "dynamic facets") inside ElasticSearch. The code is here: htt…

---

## [Highlighting the wrong value](https://discuss.elastic.co/t/highlighting-the-wrong-value/8831)

<div class="topic-metadata">

**Author:** [@Oleg\_Ievtushok](https://discuss.elastic.co/u/Oleg_Ievtushok)\
**Replies:** 4\
**Last updated:** [August 30, 2012, 12:11am UTC](https://discuss.elastic.co/t/highlighting-the-wrong-value/8831 "2012-08-30T00:11:46Z")

</div>

Hi everyone, I have the following scenario, where the wrong value is highlighted: #!/bin/bash curl -XDELETE 'http://localhost:9200/highlight' curl -XPOST 'http://localhost:9200/highlight' curl -XPUT -d '{ "doc…

---

## [Elastic 7.6.1: 503 Service Unavailable (fresh install)](https://discuss.elastic.co/t/elastic-7-6-1-503-service-unavailable-fresh-install/225203)

<div class="topic-metadata">

**Author:** [@MSP](https://discuss.elastic.co/u/MSP)\
**Replies:** 3\
**Last updated:** [March 27, 2020, 10:10am UTC](https://discuss.elastic.co/t/elastic-7-6-1-503-service-unavailable-fresh-install/225203 "2020-03-27T10:10:29Z")

</div>

I've installed eleasticsearch according to the manual provided on https://www.elastic.co/guide/en/elasticsearch/reference/current/deb.html After starting elastic I tried to check the service: $ curl -X GET "http://127.…

---

## [Alert if no logs received for each host](https://discuss.elastic.co/t/alert-if-no-logs-received-for-each-host/178285)

<div class="topic-metadata">

**Author:** [@BKG](https://discuss.elastic.co/u/BKG)\
**Replies:** 3\
**Last updated:** [April 25, 2019, 8:35am UTC](https://discuss.elastic.co/t/alert-if-no-logs-received-for-each-host/178285 "2019-04-25T08:35:10Z")

</div>

Hi, Just wondering if someone knows how to be alerted if a host hasn't sent any logs in 10 minutes? I've only seen examples where entire indexes haven't received any events, but I want to be able to detect individual h…

---

## [Filter Greater Than in Table Visualization](https://discuss.elastic.co/t/filter-greater-than-in-table-visualization/173070)

<div class="topic-metadata">

**Author:** [@\_Levi](https://discuss.elastic.co/u/_Levi)\
**Replies:** 3\
**Last updated:** [March 21, 2019, 3:43am UTC](https://discuss.elastic.co/t/filter-greater-than-in-table-visualization/173070 "2019-03-21T03:43:19Z")

</div>

So here I have a table that has two columns Account Name and CountName where CountName is represent the number of Account Name, How can I filter to show the CountName greater than or equal 20 for examle. Here is my saved…

---

## [Certificate signed by unknown authority](https://discuss.elastic.co/t/certificate-signed-by-unknown-authority/169493)

<div class="topic-metadata">

**Author:** [@dilate](https://discuss.elastic.co/u/dilate)\
**Replies:** 0\
**Last updated:** [February 21, 2019, 9:35pm UTC](https://discuss.elastic.co/t/certificate-signed-by-unknown-authority/169493 "2019-02-21T21:35:08Z")

</div>

Hello, sorry for my rough English. I have a problem with filebeat. I have a VPS server with logstash and another server with a file beat agent to perform tests When I look at the filebeat logs I have this error: ERR…

---

## [Vega: can I get a logaritmic x-axis?](https://discuss.elastic.co/t/vega-can-i-get-a-logaritmic-x-axis/130266)

<div class="topic-metadata">

**Author:** [@Marcel-Jan](https://discuss.elastic.co/u/Marcel-Jan)\
**Replies:** 3\
**Last updated:** [May 2, 2018, 5:36pm UTC](https://discuss.elastic.co/t/vega-can-i-get-a-logaritmic-x-axis/130266 "2018-05-02T17:36:11Z")

</div>

I've been playing with Kibana and I'm really happy that Vega is around to make a good scatter plot. I got pretty far making a scatter plot, thanks to the tutorial by @timroes. I only want to make the x-axis logaritmic an…

---

## [Kibana 5 Snapshot available, but where is Elasticsearch 5?](https://discuss.elastic.co/t/kibana-5-snapshot-available-but-where-is-elasticsearch-5/45483)

<div class="topic-metadata">

**Author:** [@johncst](https://discuss.elastic.co/u/johncst)\
**Replies:** 3\
**Last updated:** [March 28, 2016, 6:18pm UTC](https://discuss.elastic.co/t/kibana-5-snapshot-available-but-where-is-elasticsearch-5/45483 "2016-03-28T18:18:57Z")

</div>

Not sure if this goes here, under Elasticsearch, or on GitHub. I thought I'd check-out Kibana 5, mainly to see if the graphic editing capabilities are present and working. I'm sure I'm not alone in wanting the ability to…

---

## [Average size of documents in ElasticSearch](https://discuss.elastic.co/t/average-size-of-documents-in-elasticsearch/44464)

<div class="topic-metadata">

**Author:** [@cterron](https://discuss.elastic.co/u/cterron)\
**Replies:** 0\
**Last updated:** [March 15, 2016, 5:26pm UTC](https://discuss.elastic.co/t/average-size-of-documents-in-elasticsearch/44464 "2016-03-15T17:26:18Z")

</div>

Can I use a query like that to calculate the average size of documents in indexes if I don't have the \_size enable at index level but I have the \_source enabled? { "query" : {"match\_all" : {}}, "aggs":{ "avg\_l…

---

## [How to separate logs from each server in kibana?](https://discuss.elastic.co/t/how-to-separate-logs-from-each-server-in-kibana/39621)

<div class="topic-metadata">

**Author:** [@babeesh](https://discuss.elastic.co/u/babeesh)\
**Replies:** 3\
**Last updated:** [January 20, 2016, 6:30am UTC](https://discuss.elastic.co/t/how-to-separate-logs-from-each-server-in-kibana/39621 "2016-01-20T06:30:53Z")

</div>

I have apache logs, syslogs and windows event logs in my logserver. I need to view logs from each server separately. Is it possible to create fields for each server ?

---

## [How safe is Java7 update 80 with ES 1.4.x?](https://discuss.elastic.co/t/how-safe-is-java7-update-80-with-es-1-4-x/1380)

<div class="topic-metadata">

**Author:** [@marcelog](https://discuss.elastic.co/u/marcelog)\
**Replies:** 3\
**Last updated:** [June 14, 2015, 11:55am UTC](https://discuss.elastic.co/t/how-safe-is-java7-update-80-with-es-1-4-x/1380 "2015-06-14T11:55:39Z")

</div>

Hello, I'm planning on upgrading from Java7 u67 to u80, due to the fix for the upcoming leapsecond. Would you consider this a needed/safe move? Are there any good/bad reports about the latest update for Java7? Thanks…

---

## [Query\_string filter fails on \_exists\_:fieldname query in Elasticsearch 5.5.0](https://discuss.elastic.co/t/query-string-filter-fails-on--exists--fieldname-query-in-elasticsearch-5-5-0/94680)

<div class="topic-metadata">

**Author:** [@bwdezend](https://discuss.elastic.co/u/bwdezend)\
**Replies:** 2\
**Last updated:** [July 27, 2017, 2:24pm UTC](https://discuss.elastic.co/t/query-string-filter-fails-on--exists--fieldname-query-in-elasticsearch-5-5-0/94680 "2017-07-27T14:24:51Z")

</div>

In years past (with ES 1.x and 2.x, and Kibana 3.x and 4.x), we would filter for records containing a field using the \_exists\_:fieldname query in the Kibana search bar. The format for these was something along the lines …

---

## [Read REST API logs and push them to elasticsearch](https://discuss.elastic.co/t/read-rest-api-logs-and-push-them-to-elasticsearch/85638)

<div class="topic-metadata">

**Author:** [@ayush\_rastogi1](https://discuss.elastic.co/u/ayush_rastogi1)\
**Replies:** 2\
**Last updated:** [May 30, 2017, 4:27pm UTC](https://discuss.elastic.co/t/read-rest-api-logs-and-push-them-to-elasticsearch/85638 "2017-05-30T16:27:07Z")

</div>

Hi Guys, I am trying to process the Service API request logs and trying to data to elasticsearch A sample line from my logs look like "111.125.230.58 - - \[13/May/2017:08:50:35 +0000\] \\"GET /ContentStorageService/…

---

## [Date format MM/dd/yyyy hh:MM:ss tt](https://discuss.elastic.co/t/date-format-mm-dd-yyyy-hh-mm-ss-tt/8400)

<div class="topic-metadata">

**Author:** [@coys](https://discuss.elastic.co/u/coys)\
**Replies:** 2\
**Last updated:** [July 12, 2012, 6:35pm UTC](https://discuss.elastic.co/t/date-format-mm-dd-yyyy-hh-mm-ss-tt/8400 "2012-07-12T18:35:01Z")

</div>

Hello, I have a date in the following format 7/12/2012 1:06:47 AM. Can I still map it in elasticsearch? If yes what should i specify the format as? I earlier had a date in MM/dd/yy format and I was able to map it usin…

[Previous page](https://discuss.elastic.co/top.md?page=1094&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1096&per_page=50&period=all)
