# Top **URL:** https://discuss.elastic.co/top.md?page=1101&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1102 --- ## [Closing Index in Production](https://discuss.elastic.co/t/closing-index-in-production/105837)
**Author:** [@Vikas\_Kumar1](https://discuss.elastic.co/u/Vikas_Kumar1)\ **Replies:** 8\ **Last updated:** [November 1, 2017, 7:14am UTC](https://discuss.elastic.co/t/closing-index-in-production/105837 "2017-11-01T07:14:53Z")
I want to update a filter and I can't do that without closing index. We are using elastic 2.4 and have 6 node cluster with minimum discoery node 4. --- ## [Formatting Date field](https://discuss.elastic.co/t/formatting-date-field/88580)
**Author:** [@Varun\_Patel](https://discuss.elastic.co/u/Varun_Patel)\ **Replies:** 3\ **Last updated:** [June 8, 2017, 7:51am UTC](https://discuss.elastic.co/t/formatting-date-field/88580 "2017-06-08T07:51:04Z")
I have date field which has default format. I want to change format of that field to MMM-YYYY. How can I do so ? --- ## [Graceful way to un-overwhelm the ES](https://discuss.elastic.co/t/graceful-way-to-un-overwhelm-the-es/7643)
**Author:** [@andym](https://discuss.elastic.co/u/andym)\ **Replies:** 8\ **Last updated:** [May 11, 2012, 4:30pm UTC](https://discuss.elastic.co/t/graceful-way-to-un-overwhelm-the-es/7643 "2012-05-11T16:30:29Z")
Hi, I am currently running indexing on c1.xlarge (with 4 ephemeral drives in RAID0 and gateway going to S3). Everything works great except every several hours ES gets overwhelmed and indexing slows significantly. F… --- ## [Invalid shift value in prefixCoded string (is encoded value really an INT?)](https://discuss.elastic.co/t/invalid-shift-value-in-prefixcoded-string-is-encoded-value-really-an-int/7103)
**Author:** [@Pavel\_Dvorak](https://discuss.elastic.co/u/Pavel_Dvorak)\ **Replies:** 3\ **Last updated:** [March 25, 2012, 11:46am UTC](https://discuss.elastic.co/t/invalid-shift-value-in-prefixcoded-string-is-encoded-value-really-an-int/7103 "2012-03-25T11:46:00Z")
Hi I don't know what I am doing what. I had in the same index in different type another field with different data type. I read that this can be a problem so I deleted that type but the problem is still there Clus… --- ## [TLS Error Calling Webhook Connector from Kibana](https://discuss.elastic.co/t/tls-error-calling-webhook-connector-from-kibana/295498)
**Author:** [@butchkelley](https://discuss.elastic.co/u/butchkelley)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 3:42pm UTC](https://discuss.elastic.co/t/tls-error-calling-webhook-connector-from-kibana/295498 "2022-02-07T15:42:41Z")
Hello - I'm running Elastic/Kibana version 7.16.2 on Linux with SSL enabled and CA signed certs. My TLS related Kibana settings are: server.ssl.enabled: true server.ssl.certificate: /path/to/server.crt server.ssl.key:… --- ## [Changing mapping during the restore](https://discuss.elastic.co/t/changing-mapping-during-the-restore/200022)
**Author:** [@skouame](https://discuss.elastic.co/u/skouame)\ **Replies:** 2\ **Last updated:** [September 19, 2019, 7:33am UTC](https://discuss.elastic.co/t/changing-mapping-during-the-restore/200022 "2019-09-19T07:33:12Z")
Hello i would like to retore the my index asset\_item\_index\_1 to another another index asset\_pp\_item\_index\_1 index save with mapping { "asset\_item\_index\_1": { "aliases": { "asset\_pp\_item": { "is\_write\_index": true … --- ## [Aggregate by Concatenate](https://discuss.elastic.co/t/aggregate-by-concatenate/186123)
**Author:** [@tinyweasel](https://discuss.elastic.co/u/tinyweasel)\ **Replies:** 2\ **Last updated:** [June 19, 2019, 2:46pm UTC](https://discuss.elastic.co/t/aggregate-by-concatenate/186123 "2019-06-19T14:46:00Z")
I was trying to find the most recent value in a metric using this previous forum post but I cannot seem to find a way to do Aggregate by Concatenate. Is it possible I have an older version of Kibana, or has Concatenate b… --- ## [How to Automatically delete index file when the hard disk is full](https://discuss.elastic.co/t/how-to-automatically-delete-index-file-when-the-hard-disk-is-full/39984)
**Author:** [@yoonanemo](https://discuss.elastic.co/u/yoonanemo)\ **Replies:** 2\ **Last updated:** [January 26, 2016, 3:38am UTC](https://discuss.elastic.co/t/how-to-automatically-delete-index-file-when-the-hard-disk-is-full/39984 "2016-01-26T03:38:18Z")
Hi, i am a newbie to ELK. Now i meet a problem about storage. After the hard disk storage reaches a certain capacity, I hope to have the stored indexed file backup, packaging and remove index files stored, ELK is a magic… --- ## [How to create a filter that contains multiple CIDR ranges?](https://discuss.elastic.co/t/how-to-create-a-filter-that-contains-multiple-cidr-ranges/187457)
**Author:** [@IraB](https://discuss.elastic.co/u/IraB)\ **Replies:** 1\ **Last updated:** [July 2, 2019, 6:48pm UTC](https://discuss.elastic.co/t/how-to-create-a-filter-that-contains-multiple-cidr-ranges/187457 "2019-07-02T18:48:40Z")
Hi there, I'm using Kibana 6.7 and trying to create some filters that are a set of IP ranges e.g. all AWS IP ranges for a given regions. This of course is a huge list of ip ranges like below: ... 52.64.0.0-52.64.127.2… --- ## [Make a file link clickable in a visualisation](https://discuss.elastic.co/t/make-a-file-link-clickable-in-a-visualisation/124105)
**Author:** [@volkera](https://discuss.elastic.co/u/volkera)\ **Replies:** 1\ **Last updated:** [March 15, 2018, 7:38pm UTC](https://discuss.elastic.co/t/make-a-file-link-clickable-in-a-visualisation/124105 "2018-03-15T19:38:54Z")
Hello, I would like to add a link to a local HTML file in a table visualisation. I don´t want to use http. After clicking the link the local HTML file should open in a new browser tab. The content of the field is: fil… --- ## [\[7.0.0\] Kibana plugin development sidebar problems](https://discuss.elastic.co/t/7-0-0-kibana-plugin-development-sidebar-problems/203999)
**Author:** [@Fabio-sama](https://discuss.elastic.co/u/Fabio-sama)\ **Replies:** 6\ **Last updated:** [October 23, 2019, 10:03am UTC](https://discuss.elastic.co/t/7-0-0-kibana-plugin-development-sidebar-problems/203999 "2019-10-23T10:03:58Z")
Hi there, I'm trying to develop a simple Kibana plugin using the React framework (library, to be precise). Now, I'm not a React expert and I'm having problems with a couple of minor tasks. When I generate a plugin … --- ## [TOP 10 Average data sheet](https://discuss.elastic.co/t/top-10-average-data-sheet/168893)
**Author:** [@YvorL](https://discuss.elastic.co/u/YvorL)\ **Replies:** 6\ **Last updated:** [February 28, 2019, 10:47am UTC](https://discuss.elastic.co/t/top-10-average-data-sheet/168893 "2019-02-28T10:47:27Z")
Hi! I need to get a list of the processes which are running the longest on average. But when I set the Metrics to "average" of the "process\_time" field and split the rows by the term "process\_name" I get confusing resul… --- ## [Formatting issues with parsing JSON from MongoDB](https://discuss.elastic.co/t/formatting-issues-with-parsing-json-from-mongodb/150847)
**Author:** [@Harshet\_Jain](https://discuss.elastic.co/u/Harshet_Jain)\ **Replies:** 5\ **Last updated:** [October 3, 2018, 10:54am UTC](https://discuss.elastic.co/t/formatting-issues-with-parsing-json-from-mongodb/150847 "2018-10-03T10:54:27Z")
I am trying to parse JSON (from MongoDB) to Kibana through Logstash. I keep getting all the data in a "log\_entry" field. This field does not exist in my data but rather is being created by Logstash. In my CONF file, I h… --- ## [Filebeat 5.5.2 Connection reset by peer](https://discuss.elastic.co/t/filebeat-5-5-2-connection-reset-by-peer/103090)
**Author:** [@Bkt](https://discuss.elastic.co/u/Bkt)\ **Replies:** 5\ **Last updated:** [October 10, 2017, 8:21pm UTC](https://discuss.elastic.co/t/filebeat-5-5-2-connection-reset-by-peer/103090 "2017-10-10T20:21:45Z")
Hello, I am getting connection reset when using filebeat to send the logs to logstash. When I restart filebeat, it does send the prior events but soon repeats the connection reset by peer event. I am using the filebeat v… --- ## [ES DeleteByQuery fails to delete records sometimes](https://discuss.elastic.co/t/es-deletebyquery-fails-to-delete-records-sometimes/73639)
**Author:** [@dipathak](https://discuss.elastic.co/u/dipathak)\ **Replies:** 5\ **Last updated:** [February 13, 2017, 4:54pm UTC](https://discuss.elastic.co/t/es-deletebyquery-fails-to-delete-records-sometimes/73639 "2017-02-13T16:54:34Z")
Hi, We are using ES 2.0, on a 3 node cluster, with deleteByQuery plugin. The query sometimes fails to delete some or all of the documents. This behavior is not consistent. Sometimes, all docs are deleted, sometimes few a… --- ## [LEAD/LAG window function in elasticsearch](https://discuss.elastic.co/t/lead-lag-window-function-in-elasticsearch/332866)
**Author:** [@Sanjana\_Saswade](https://discuss.elastic.co/u/Sanjana_Saswade)\ **Replies:** 4\ **Last updated:** [May 9, 2023, 2:47pm UTC](https://discuss.elastic.co/t/lead-lag-window-function-in-elasticsearch/332866 "2023-05-09T14:47:33Z")
I need to use LEAD /LAG function in elasticsearch. i tried collapse in ELK but it's not working. How do I fix this? sql query for convert in Elasticsearch query: select name, LAG(salary) OVER(PARTITION BY department … --- ## [Groovy and Replica performance issue](https://discuss.elastic.co/t/groovy-and-replica-performance-issue/107355)
**Author:** [@liorisme6](https://discuss.elastic.co/u/liorisme6)\ **Replies:** 0\ **Last updated:** [November 13, 2017, 8:34am UTC](https://discuss.elastic.co/t/groovy-and-replica-performance-issue/107355 "2017-11-13T08:34:57Z")
Hi there, I'll start by confessing that we're still using an ancient version of ES (1.7.2) - please don't laugh :blush: We have plans to upgrade real soon. We receive about 30k events every minute with the following d… --- ## [Moving Elasticsearch Data to New Storage](https://discuss.elastic.co/t/moving-elasticsearch-data-to-new-storage/306658)
**Author:** [@Ryan66740](https://discuss.elastic.co/u/Ryan66740)\ **Replies:** 3\ **Last updated:** [June 14, 2022, 12:33am UTC](https://discuss.elastic.co/t/moving-elasticsearch-data-to-new-storage/306658 "2022-06-14T00:33:27Z")
I have an Elasticsearch Cluster (v5.6.9) - x2 Data Nodes Both Physical Servers with Storage on different 3PAR systems + x1 Master (Quorum VM). Having 2 Shards + 1 Replica. I need to migrate both Data Nodes' storage to n… --- ## [Transform and get previous row value](https://discuss.elastic.co/t/transform-and-get-previous-row-value/262881)
**Author:** [@wicka](https://discuss.elastic.co/u/wicka)\ **Replies:** 3\ **Last updated:** [February 17, 2021, 7:23am UTC](https://discuss.elastic.co/t/transform-and-get-previous-row-value/262881 "2021-02-17T07:23:21Z")
I've got elasticsearch setup to collect log from Jenkins. I want to visualize the duration on each build stage. However Jenkins logs is really unstructured, I find many difference way in elasticsearch and still not able … --- ## [How to fix URL template in string field type URL](https://discuss.elastic.co/t/how-to-fix-url-template-in-string-field-type-url/226838)
**Author:** [@111207](https://discuss.elastic.co/u/111207)\ **Replies:** 3\ **Last updated:** [April 10, 2020, 5:11am UTC](https://discuss.elastic.co/t/how-to-fix-url-template-in-string-field-type-url/226838 "2020-04-10T05:11:24Z")
Hi Elastic team I 'm using FSCrewler to Import data to elasticsearch and I change string field name path.virtual to Link URL. I need to click to access into the file. How to fix the URL template it Filename es.txt … --- ## [Grok syslog-ng stats](https://discuss.elastic.co/t/grok-syslog-ng-stats/121685)
**Author:** [@pdna](https://discuss.elastic.co/u/pdna)\ **Replies:** 3\ **Last updated:** [February 27, 2018, 7:18pm UTC](https://discuss.elastic.co/t/grok-syslog-ng-stats/121685 "2018-02-27T19:18:19Z")
Feb 20 00:30:00 host syslog-ng\[12336\]: Log statistics; queued='global(scratch\_buffers\_count)=0', processed='destination(ntpd\_clients)=59', processed='destination(allusers)=0', processed='center(received)=372450', proces… --- ## [Template .monitoring-es conflicts with my template](https://discuss.elastic.co/t/template-monitoring-es-conflicts-with-my-template/97506)
**Author:** [@John\_ax](https://discuss.elastic.co/u/John_ax)\ **Replies:** 3\ **Last updated:** [August 28, 2017, 1:33pm UTC](https://discuss.elastic.co/t/template-monitoring-es-conflicts-with-my-template/97506 "2017-08-28T13:33:42Z")
By using ES 5.5 with x-pack installed, I got so many error log telling timestamp mapper conflicts: \[2017-08-18T11:43:24,474\]\[WARN \]\[o.e.x.m.e.l.LocalExporter\] unexpected error while indexing monitoring document org.elas… --- ## [Will Filebeat work on Rocky Linux?](https://discuss.elastic.co/t/will-filebeat-work-on-rocky-linux/308875)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 2\ **Last updated:** [July 6, 2022, 10:13am UTC](https://discuss.elastic.co/t/will-filebeat-work-on-rocky-linux/308875 "2022-07-06T10:13:21Z")
Hello, I'm looking for a way to get Filebeat to work on Rocky Linux. I have deployed Filebeat on several servers and have been collecting logs with ElasticSearch. This is the first time I would like to deploy Filebeat o… --- ## [How to index postgresql database](https://discuss.elastic.co/t/how-to-index-postgresql-database/55048)
**Author:** [@ggp](https://discuss.elastic.co/u/ggp)\ **Replies:** 2\ **Last updated:** [July 8, 2016, 12:51pm UTC](https://discuss.elastic.co/t/how-to-index-postgresql-database/55048 "2016-07-08T12:51:41Z")
i am new to ES using 2.3.x can someone point me to any docs on how we can index data from postgresql ? looks like rivers are deprecated since 1.5 https://www.elastic.co/guide/en/elasticsearch/rivers/current/index.html --- ## [Using Unicast discovery with logstash & elasticsearch](https://discuss.elastic.co/t/using-unicast-discovery-with-logstash-elasticsearch/28897)
**Author:** [@Deb](https://discuss.elastic.co/u/Deb)\ **Replies:** 2\ **Last updated:** [September 10, 2015, 6:11pm UTC](https://discuss.elastic.co/t/using-unicast-discovery-with-logstash-elasticsearch/28897 "2015-09-10T18:11:31Z")
I want to use unicast discovery in one of my logstash deployments as mentioned here in the best practices. I have gone through this link. My ES Cluster looks like below:- 3 Master-Data Nodes - es-masterdata1, es-m… --- ## [\[Resolved\] Grok filter discard entities](https://discuss.elastic.co/t/resolved-grok-filter-discard-entities/27862)
**Author:** [@rishi](https://discuss.elastic.co/u/rishi)\ **Replies:** 2\ **Last updated:** [August 24, 2015, 1:36pm UTC](https://discuss.elastic.co/t/resolved-grok-filter-discard-entities/27862 "2015-08-24T13:36:07Z")
How can I exclude / discard those events which the grok filter fails to parse? I would like to just discard such events instead of crashing the service. --- ## [Query documents with per term weights](https://discuss.elastic.co/t/query-documents-with-per-term-weights/155648)
**Author:** [@lc\_es](https://discuss.elastic.co/u/lc_es)\ **Replies:** 1\ **Last updated:** [November 20, 2018, 10:46pm UTC](https://discuss.elastic.co/t/query-documents-with-per-term-weights/155648 "2018-11-20T22:46:19Z")
The documents in my index have a field containing a list of all attribute terms, like "fieldA": \["attr1", "attr3", "attr7"\] and for each attribute term, a field containing its weight, like "weight:attr1": 0.5, "weight… --- ## [Replacement for twitter river to import data from mysql](https://discuss.elastic.co/t/replacement-for-twitter-river-to-import-data-from-mysql/53096)
**Author:** [@megha\_gowda](https://discuss.elastic.co/u/megha_gowda)\ **Replies:** 7\ **Last updated:** [June 30, 2016, 10:06am UTC](https://discuss.elastic.co/t/replacement-for-twitter-river-to-import-data-from-mysql/53096 "2016-06-30T10:06:46Z")
can i know the alternative for twitter river to import data from mysql server for lasticsearch-2.3.0 --- ## [Elasticsearh Error : Pods not coming back up](https://discuss.elastic.co/t/elasticsearh-error-pods-not-coming-back-up/293380)
**Author:** [@tropically](https://discuss.elastic.co/u/tropically)\ **Replies:** 8\ **Last updated:** [January 7, 2022, 8:51pm UTC](https://discuss.elastic.co/t/elasticsearh-error-pods-not-coming-back-up/293380 "2022-01-07T20:51:24Z")
Hi We have Elasticsearch running on openshift. Image: docker.elastic.co/elasticsearch/elasticsearch:6.8.15 All of a sudden on the the pods went down and are not restarting. Trying to figure out what the cause is. Log… --- ## [Search phase execution exception - Request to Elasticsearch failed](https://discuss.elastic.co/t/search-phase-execution-exception-request-to-elasticsearch-failed/216988)
**Author:** [@Voula\_Mikr](https://discuss.elastic.co/u/Voula_Mikr)\ **Replies:** 0\ **Last updated:** [January 29, 2020, 11:25am UTC](https://discuss.elastic.co/t/search-phase-execution-exception-request-to-elasticsearch-failed/216988 "2020-01-29T11:25:51Z")
Hi! I am trying to add a sub-bucket in an kibana histogram and i get the bellow: Request to Elasticsearch failed: {"error":{ "root\_cause": "type":"search\_phase\_execution\_exception","reason":"all shards failed","phase… --- ## [How to query type has array field's length \> 0](https://discuss.elastic.co/t/how-to-query-type-has-array-fields-length-0/18347)
**Author:** [@Hoan\_Nguyen](https://discuss.elastic.co/u/Hoan_Nguyen)\ **Replies:** 0\ **Last updated:** [June 26, 2014, 7:48am UTC](https://discuss.elastic.co/t/how-to-query-type-has-array-fields-length-0/18347 "2014-06-26T07:48:54Z")
Hi, Here is school entity mapping school: mappings: name: ~ rankings: ~ Here is my query: Array ( \[sort\] =\> Array ( \[rankingTotal\] =\> Array … --- ## [Not able to put data in Kibana dev tools, any ideas?](https://discuss.elastic.co/t/not-able-to-put-data-in-kibana-dev-tools-any-ideas/225268)
**Author:** [@vernal](https://discuss.elastic.co/u/vernal)\ **Replies:** 5\ **Last updated:** [April 3, 2020, 3:56pm UTC](https://discuss.elastic.co/t/not-able-to-put-data-in-kibana-dev-tools-any-ideas/225268 "2020-04-03T15:56:54Z")
I installed new Kibana and elasticsearch. Then I typed in the following commands in "dev tools": PUT /ag2\_vehicle\_stats { "mappings": { "doc": { "properties": { "vin": { "type": "keyword" }, "error\_reported": { "type": … --- ## [HOW CAN WE DO FREE AUTHENTICATION AND AUTHORIZATION FOR KIBANA DASHBOARDS AND ELASTIC SEARCH](https://discuss.elastic.co/t/how-can-we-do-free-authentication-and-authorization-for-kibana-dashboards-and-elastic-search/168384)
**Author:** [@PRUDHVI\_CHOWDHARY\_NE](https://discuss.elastic.co/u/PRUDHVI_CHOWDHARY_NE)\ **Replies:** 5\ **Last updated:** [February 15, 2019, 6:53am UTC](https://discuss.elastic.co/t/how-can-we-do-free-authentication-and-authorization-for-kibana-dashboards-and-elastic-search/168384 "2019-02-15T06:53:52Z")
HOW CAN WE DO FREE AUTHENTICATION AND AUTHORIZATION FOR KIBANA DASHBOARDS AND ELASTIC SEARCH FOR FREE OF COST.IS IT POSSIBLE IN LOCAL HOST.IF POSSIBLE HOW CAN WE DO. --- ## [How does ES do parallel dispatch for searches?](https://discuss.elastic.co/t/how-does-es-do-parallel-dispatch-for-searches/21912)
**Author:** [@burtonator](https://discuss.elastic.co/u/burtonator)\ **Replies:** 5\ **Last updated:** [January 30, 2015, 6:59am UTC](https://discuss.elastic.co/t/how-does-es-do-parallel-dispatch-for-searches/21912 "2015-01-30T06:59:53Z")
I can't RTFM on this because I can't find the documentation. It looks like some of our queries are taking about 1 second per index shard per index. However, the drives are still have low utilization. Around 10… --- ## [Dashboards in ndjson format](https://discuss.elastic.co/t/dashboards-in-ndjson-format/349128)
**Author:** [@Jean\_BARBIER](https://discuss.elastic.co/u/Jean_BARBIER)\ **Replies:** 6\ **Last updated:** [January 8, 2024, 8:15am UTC](https://discuss.elastic.co/t/dashboards-in-ndjson-format/349128 "2024-01-08T08:15:21Z")
Hello, In the package auditbeat-oss-8.11.2-linux-x86\_64, the dashboards can be found, but they are in json format. Since kibana 7.3 the import format is ndjson. Is there a way to find them in ndjson format ? regards --- ## [Elasticsearch 2.4 Shard Rebalancing](https://discuss.elastic.co/t/elasticsearch-2-4-shard-rebalancing/178537)
**Author:** [@jcameron](https://discuss.elastic.co/u/jcameron)\ **Replies:** 6\ **Last updated:** [April 29, 2019, 2:09am UTC](https://discuss.elastic.co/t/elasticsearch-2-4-shard-rebalancing/178537 "2019-04-29T02:09:31Z")
Hi all, Service: Elasticsearch Number of Nodes: 9 Version: 2.4 We currently run an Elasticsearch cluster under v2.4 that consists of 9 nodes. Each node has a relatively even number of shards on it, and we have not a… --- ## [The error message "output.go:92: ERR Failed to publish events: temporary bulk send failure"](https://discuss.elastic.co/t/the-error-message-output-go-92-err-failed-to-publish-events-temporary-bulk-send-failure/130239)
**Author:** [@anson\_ch](https://discuss.elastic.co/u/anson_ch)\ **Replies:** 1\ **Last updated:** [May 2, 2018, 1:31pm UTC](https://discuss.elastic.co/t/the-error-message-output-go-92-err-failed-to-publish-events-temporary-bulk-send-failure/130239 "2018-05-02T13:31:58Z")
I have some problem, the error log is being outputted by filebeat endlessly. please see the following detail message. 2018-05-02T09:27:21.879178437Z 2018/05/02 09:27:21.879028 output.go:92: ERR Failed to publish events… --- ## [Questions about migrating from Elasticsearch to Enterprise App Search](https://discuss.elastic.co/t/questions-about-migrating-from-elasticsearch-to-enterprise-app-search/272352)
**Author:** [@SMB](https://discuss.elastic.co/u/SMB)\ **Replies:** 2\ **Last updated:** [February 7, 2022, 9:03pm UTC](https://discuss.elastic.co/t/questions-about-migrating-from-elasticsearch-to-enterprise-app-search/272352 "2022-02-07T21:03:56Z")
Hi there, currently my company is looking at migrating from a hosted ES installation (with custom PHP integration) to Enterprise App Search. Primarily for the UI (analytics, ease of tuning, non-developer exposure etc.) t… --- ## [When should I use filebeat instead of logstash](https://discuss.elastic.co/t/when-should-i-use-filebeat-instead-of-logstash/239415)
**Author:** [@Willem\_Jenniskens](https://discuss.elastic.co/u/Willem_Jenniskens)\ **Replies:** 2\ **Last updated:** [July 1, 2020, 7:27am UTC](https://discuss.elastic.co/t/when-should-i-use-filebeat-instead-of-logstash/239415 "2020-07-01T07:27:31Z")
I have a litte trouble understanding filebeat. What can I do with filebeat that I cannot do with logstash? I use logstash to load a bunch of logfiles into ElasticSearch. This works fine. What problem does filebeat solve?… --- ## [Elasticsearch 7.2 not starting on CentOS 7 because of xpack.security.enabled setting](https://discuss.elastic.co/t/elasticsearch-7-2-not-starting-on-centos-7-because-of-xpack-security-enabled-setting/191055)
**Author:** [@vinodres](https://discuss.elastic.co/u/vinodres)\ **Replies:** 2\ **Last updated:** [July 20, 2019, 12:41pm UTC](https://discuss.elastic.co/t/elasticsearch-7-2-not-starting-on-centos-7-because-of-xpack-security-enabled-setting/191055 "2019-07-20T12:41:53Z")
I have just installed Elasticsearch 7.2 OSS (rpm) using Ansible 2.8.2 on a CentOS 7 POC server. The Ansible playbook ran successfully. I used following path to download it https://artifacts.elastic.co/downloads/elasti… --- ## [Dose ES have the plan to support master-slave mode?](https://discuss.elastic.co/t/dose-es-have-the-plan-to-support-master-slave-mode/41956)
**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\ **Replies:** 2\ **Last updated:** [February 17, 2016, 4:47pm UTC](https://discuss.elastic.co/t/dose-es-have-the-plan-to-support-master-slave-mode/41956 "2016-02-17T16:47:07Z")
so I can setup dup cluster to backup data near real time --- ## [Using DigitalOcean spaces to store Elasticsearch snapshots](https://discuss.elastic.co/t/using-digitalocean-spaces-to-store-elasticsearch-snapshots/225780)
**Author:** [@lcanas](https://discuss.elastic.co/u/lcanas)\ **Replies:** 1\ **Last updated:** [March 31, 2020, 12:05pm UTC](https://discuss.elastic.co/t/using-digitalocean-spaces-to-store-elasticsearch-snapshots/225780 "2020-03-31T12:05:00Z")
Hi all, some months ago I started to look for information related to using DigitalOcean Spaces to store Elasticsearch Snapshots. Due to I did not find any examples available I decided to write a blog post about this jus… --- ## [Logstash on k8s - high memory usage](https://discuss.elastic.co/t/logstash-on-k8s-high-memory-usage/241299)
**Author:** [@zachshani](https://discuss.elastic.co/u/zachshani)\ **Replies:** 4\ **Last updated:** [July 16, 2020, 5:45pm UTC](https://discuss.elastic.co/t/logstash-on-k8s-high-memory-usage/241299 "2020-07-16T17:45:24Z")
Hi, I'm implementing logstash as a deployment (pod) on k8s. I've noticed that it consumes high memory - even when no data is being send to it. I've tried setting jvm.options (Xms4g & Xmx4g), but I got same results - h… --- ## [（ES6.2.3 on AWS EC2）AZごとのShard Allocation Awareness について](https://discuss.elastic.co/t/es6-2-3-on-aws-ec2-az-shard-allocation-awareness/126841)
**Author:** [@mkokui](https://discuss.elastic.co/u/mkokui)\ **Replies:** 4\ **Last updated:** [April 11, 2018, 1:30am UTC](https://discuss.elastic.co/t/es6-2-3-on-aws-ec2-az-shard-allocation-awareness/126841 "2018-04-11T01:30:20Z")
■環境 Elasticsearch 6.23 － Plugin に「discovery-ec2 6.2.3」をインストール済 OS: Amazon Linux AMI 2017.09.1 (HVM), SSD Volume Type - ami-a77c30c1 ■やりたいこと １つのAZ内に配置されているElasticsearchのノードだけで完全なインデックス（シャード）を保持し、受け付けた検索要求は同じAZ内で検索を完結… --- ## [Spatial Similarity](https://discuss.elastic.co/t/spatial-similarity/106501)
**Author:** [@loff](https://discuss.elastic.co/u/loff)\ **Replies:** 1\ **Last updated:** [November 10, 2017, 3:48pm UTC](https://discuss.elastic.co/t/spatial-similarity/106501 "2017-11-10T15:48:31Z")
Hi, I was wondering if there are any plugins / methods for calculating the similarity of spatial features. I'm planning to build a recommendation system for spatial data. The data I have consists of points, polygons and… --- ## [Logstash pipeline order](https://discuss.elastic.co/t/logstash-pipeline-order/269057)
**Author:** [@Narayan\_Banik](https://discuss.elastic.co/u/Narayan_Banik)\ **Replies:** 3\ **Last updated:** [April 2, 2021, 8:34am UTC](https://discuss.elastic.co/t/logstash-pipeline-order/269057 "2021-04-02T08:34:54Z")
Hello All, Is there any order of logstash pipelines config: I've below pipelines: \[root@gzp-p-qv-logst-3 pipeline\]# ls -larth total 60K drwxr-xr-x. 3 logstash logstash 42 Oct 11 2019 .. -rw-r--r--. 1 root root … --- ## [Logstash + unknown setting seperator for csv](https://discuss.elastic.co/t/logstash-unknown-setting-seperator-for-csv/168692)
**Author:** [@bharathi1](https://discuss.elastic.co/u/bharathi1)\ **Replies:** 3\ **Last updated:** [February 18, 2019, 8:36am UTC](https://discuss.elastic.co/t/logstash-unknown-setting-seperator-for-csv/168692 "2019-02-18T08:36:11Z")
2019-02-16T20:07:07,894\]\[WARN \]\[logstash.config.source.multilocal\] Ignoring the 'pipelines.yml' file because modules or command line options are specified \[2019-02-16T20:07:07,910\]\[INFO \]\[logstash.runner \] Star… --- ## [Cannot run kibana on Mac OS X](https://discuss.elastic.co/t/cannot-run-kibana-on-mac-os-x/163062)
**Author:** [@Hideto\_Masuoka](https://discuss.elastic.co/u/Hideto_Masuoka)\ **Replies:** 3\ **Last updated:** [January 12, 2019, 1:16am UTC](https://discuss.elastic.co/t/cannot-run-kibana-on-mac-os-x/163062 "2019-01-12T01:16:58Z")
Kibana version:6.5.2 OS $ sw\_vers ProductName: Mac OS X ProductVersion: 10.14.2 BuildVersion: 18C54 I get the following error which I cannot figure out what happend: $ ./bin/kibana log \[01:22:32.107\] \[info\]\[st… --- ## [Custom logs/error exceptions on client side to Kibana server](https://discuss.elastic.co/t/custom-logs-error-exceptions-on-client-side-to-kibana-server/67610)
**Author:** [@Shubham\_Agrawal](https://discuss.elastic.co/u/Shubham_Agrawal)\ **Replies:** 3\ **Last updated:** [December 1, 2016, 5:47pm UTC](https://discuss.elastic.co/t/custom-logs-error-exceptions-on-client-side-to-kibana-server/67610 "2016-12-01T17:47:41Z")
Hi, I basically want to logs some custom events, error exceptions on my kibana client and send them to the kibana server. What could be the possible ways in which i can achieve this ? PS: custom events include visiting a… --- ## [Finding percentage difference/deviation using 2 queries](https://discuss.elastic.co/t/finding-percentage-difference-deviation-using-2-queries/25832)
**Author:** [@suriyakode](https://discuss.elastic.co/u/suriyakode)\ **Replies:** 3\ **Last updated:** [July 20, 2015, 10:11pm UTC](https://discuss.elastic.co/t/finding-percentage-difference-deviation-using-2-queries/25832 "2015-07-20T22:11:01Z")
Hi, So what I am trying to do is find the percent difference over time. For this, I take the average values over the past hour and compare them to the average values over the past day. I can do this using 2 queries and… [Previous page](https://discuss.elastic.co/top.md?page=1100&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1102&per_page=50&period=all)