# Top

**URL:** https://discuss.elastic.co/top.md?page=1124&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1125

---

## [Parquet output codec](https://discuss.elastic.co/t/parquet-output-codec/128177)

<div class="topic-metadata">

**Author:** [@hartfordfive](https://discuss.elastic.co/u/hartfordfive)\
**Replies:** 0\
**Last updated:** [April 16, 2018, 11:24am UTC](https://discuss.elastic.co/t/parquet-output-codec/128177 "2018-04-16T11:24:51Z")

</div>

I am currently index data into Elasticsearch although I'm looking for a simple method to also store logs on an HDFS cluster in parquet format for longer term storage and to allow for search/map reduce jobs over many year…

---

## [Winlogbeat data missing](https://discuss.elastic.co/t/winlogbeat-data-missing/310148)

<div class="topic-metadata">

**Author:** [@HTM](https://discuss.elastic.co/u/HTM)\
**Replies:** 5\
**Last updated:** [July 21, 2022, 6:05am UTC](https://discuss.elastic.co/t/winlogbeat-data-missing/310148 "2022-07-21T06:05:44Z")

</div>

Hi All, New Elastic user here:) My setup: Ubuntu 22.04 LTS Server, running ELK Stack. My kibana.yml: My Elasticsearch.yml: I Have added our Sophos firewall using the Sophos Filebeat module. I can read a…

---

## [Adding warm node to existing cluster, how to avoid existing indices to spread to these nodes](https://discuss.elastic.co/t/adding-warm-node-to-existing-cluster-how-to-avoid-existing-indices-to-spread-to-these-nodes/250239)

<div class="topic-metadata">

**Author:** [@Petr.Simik](https://discuss.elastic.co/u/Petr.Simik)\
**Replies:** 5\
**Last updated:** [September 29, 2020, 4:05pm UTC](https://discuss.elastic.co/t/adding-warm-node-to-existing-cluster-how-to-avoid-existing-indices-to-spread-to-these-nodes/250239 "2020-09-29T16:05:16Z")

</div>

I plan to add 3 warm nodes into my cluster. (version 7.9 and 15 hot nodes) I modified elasticsearch.yml with these new lines: node.attr.data: hot # on existing nodes node.attr.data: warm # on new nodes when I s…

---

## [While embedded Kibana how to hide Menu Bar?](https://discuss.elastic.co/t/while-embedded-kibana-how-to-hide-menu-bar/189078)

<div class="topic-metadata">

**Author:** [@NAHA](https://discuss.elastic.co/u/NAHA)\
**Replies:** 1\
**Last updated:** [July 5, 2019, 9:57pm UTC](https://discuss.elastic.co/t/while-embedded-kibana-how-to-hide-menu-bar/189078 "2019-07-05T21:57:06Z")

</div>

Hi , I am embedded Kibana , I am only using Kibana Discover and share link then I added iframe in my page. But I don't want to user see all of menu bar Kibana.Is it possible to hide menu bar? or Just show discover item…

---

## [Ingest pdf/doc/ppt files from HDFS to Elastic Search. Fscrawler vs es-hadoop](https://discuss.elastic.co/t/ingest-pdf-doc-ppt-files-from-hdfs-to-elastic-search-fscrawler-vs-es-hadoop/109059)

<div class="topic-metadata">

**Author:** [@vimal\_kumar](https://discuss.elastic.co/u/vimal_kumar)\
**Replies:** 1\
**Last updated:** [December 13, 2017, 8:46pm UTC](https://discuss.elastic.co/t/ingest-pdf-doc-ppt-files-from-hdfs-to-elastic-search-fscrawler-vs-es-hadoop/109059 "2017-12-13T20:46:09Z")

</div>

Guys, Hope you can shed some light on this use case. I have a use case to store thousands of documents and index them. For my purpose, Springboot app will receive the uploaded files, store the metadata/application relate…

---

## [ES 5.6.2 crashes with SIGABRT + Java VM crashes with SIGSEGV](https://discuss.elastic.co/t/es-5-6-2-crashes-with-sigabrt-java-vm-crashes-with-sigsegv/102551)

<div class="topic-metadata">

**Author:** [@mguiwin](https://discuss.elastic.co/u/mguiwin)\
**Replies:** 1\
**Last updated:** [October 6, 2017, 5:44am UTC](https://discuss.elastic.co/t/es-5-6-2-crashes-with-sigabrt-java-vm-crashes-with-sigsegv/102551 "2017-10-06T05:44:24Z")

</div>

Hi, My setup: cluster of 3 nodes on dedicated Ubuntu 16.04.3 LTS VMs on Azure ES version: 5.6.2 JRE: 1.8.0\_144-b01 (Oracle) Java VM: Java HotSpot(TM) 64-Bit Server VM (25.144-b01 mixed mode linux-amd64 ) My problem: …

---

## [Not able to create a data table using Split rows bucket type](https://discuss.elastic.co/t/not-able-to-create-a-data-table-using-split-rows-bucket-type/96819)

<div class="topic-metadata">

**Author:** [@shroh](https://discuss.elastic.co/u/shroh)\
**Replies:** 1\
**Last updated:** [August 15, 2017, 3:20pm UTC](https://discuss.elastic.co/t/not-able-to-create-a-data-table-using-split-rows-bucket-type/96819 "2017-08-15T15:20:57Z")

</div>

Kibana Version : 5.5 I want to create a data table to show the number of logins to a website based on the user names. so basically it will be like this UserID First Name Last Name Count ABC …

---

## [Unable to fetch mapping. Do you have indices mapping the pattern?](https://discuss.elastic.co/t/unable-to-fetch-mapping-do-you-have-indices-mapping-the-pattern/56431)

<div class="topic-metadata">

**Author:** [@rkvishnu](https://discuss.elastic.co/u/rkvishnu)\
**Replies:** 1\
**Last updated:** [July 26, 2016, 10:48pm UTC](https://discuss.elastic.co/t/unable-to-fetch-mapping-do-you-have-indices-mapping-the-pattern/56431 "2016-07-26T22:48:27Z")

</div>

Hi, I am new to setting up log analyzing tools. Initial set up of Elastic search, Kibana and Logstash looked very simple when I followed the documentation on elastic website All 3 components and filebeat have been…

---

## [8.0 Upgrade Assistant and the changing log format warning](https://discuss.elastic.co/t/8-0-upgrade-assistant-and-the-changing-log-format-warning/292277)

<div class="topic-metadata">

**Author:** [@mw\_jko](https://discuss.elastic.co/u/mw_jko)\
**Replies:** 4\
**Last updated:** [December 17, 2021, 4:31pm UTC](https://discuss.elastic.co/t/8-0-upgrade-assistant-and-the-changing-log-format-warning/292277 "2021-12-17T16:31:46Z")

</div>

Heya, I updated the ELK stack to the very latest version and it looks like, it's the probably last "minor" update :tada: I fixed all the issues reported by the upgrade assistant so far (the upgrade assistant was a huge…

---

## [With ES Basic License, Can We Use X-Pack Free Features in Our Commercial Products without Pay](https://discuss.elastic.co/t/with-es-basic-license-can-we-use-x-pack-free-features-in-our-commercial-products-without-pay/219764)

<div class="topic-metadata">

**Author:** [@tang\_cai](https://discuss.elastic.co/u/tang_cai)\
**Replies:** 4\
**Last updated:** [February 19, 2020, 3:12am UTC](https://discuss.elastic.co/t/with-es-basic-license-can-we-use-x-pack-free-features-in-our-commercial-products-without-pay/219764 "2020-02-19T03:12:58Z")

</div>

As described in the title, we want to use the x-pack free features, like upgrade assist，in our commercial product? Can we use it with basic license without pay?

---

## [Vega Pie Chart not Rendering](https://discuss.elastic.co/t/vega-pie-chart-not-rendering/168850)

<div class="topic-metadata">

**Author:** [@PeterSkarmyr](https://discuss.elastic.co/u/PeterSkarmyr)\
**Replies:** 4\
**Last updated:** [February 19, 2019, 6:31pm UTC](https://discuss.elastic.co/t/vega-pie-chart-not-rendering/168850 "2019-02-19T18:31:09Z")

</div>

I am trying to make a simple pie chart in vega, but it won't render. I think there is something wrong with the data structure. I have tried many vega transforms, but I can't get it to work. Am I doing something wrong? V…

---

## [Elasticsearch installation](https://discuss.elastic.co/t/elasticsearch-installation/152969)

<div class="topic-metadata">

**Author:** [@MiddlewareTeam](https://discuss.elastic.co/u/MiddlewareTeam)\
**Replies:** 4\
**Last updated:** [October 19, 2018, 11:48am UTC](https://discuss.elastic.co/t/elasticsearch-installation/152969 "2018-10-19T11:48:25Z")

</div>

After installtion Elasticsearch pid for the same getting generated but it gets killed after few seconds throwing error as below: \< \[2018-10-18T10:10:15,136\]\[WARN \]\[o.e.b.ElasticsearchUncaughtExceptionHandler\] uncaught…

---

## [Aggregating on geo\_point](https://discuss.elastic.co/t/aggregating-on-geo-point/120885)

<div class="topic-metadata">

**Author:** [@sharongur](https://discuss.elastic.co/u/sharongur)\
**Replies:** 4\
**Last updated:** [March 13, 2018, 8:19am UTC](https://discuss.elastic.co/t/aggregating-on-geo-point/120885 "2018-03-13T08:19:02Z")

</div>

Is there a way to aggregate on a geo\_point field and to receive the actual lat long? all i managed to do is get the hash geo. what i did so far: creating the index PUT geo\_test { "mappings": { "sharon\_test": { …

---

## [Backup ELK data on a URL](https://discuss.elastic.co/t/backup-elk-data-on-a-url/120557)

<div class="topic-metadata">

**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\
**Replies:** 4\
**Last updated:** [February 20, 2018, 8:01am UTC](https://discuss.elastic.co/t/backup-elk-data-on-a-url/120557 "2018-02-20T08:01:31Z")

</div>

Hi, Is there any way that I can take the snapshot of Elastic search data and push it to an URL (http) like an JFROG Artifactory (https://jfrog.com/artifactory). Thanks !

---

## [What is the grok pattern for this?](https://discuss.elastic.co/t/what-is-the-grok-pattern-for-this/83393)

<div class="topic-metadata">

**Author:** [@Yaswanth](https://discuss.elastic.co/u/Yaswanth)\
**Replies:** 4\
**Last updated:** [April 24, 2017, 10:59am UTC](https://discuss.elastic.co/t/what-is-the-grok-pattern-for-this/83393 "2017-04-24T10:59:31Z")

</div>

Hi, Seems to be a easy question but i am quite new to this grok pattern.I have logs like this {"@timestamp": "2017-04-24T07:03:07.985Z", "function": "cli", "linenum": 204, "loglevel": "INFO", "message": "Job complete…

---

## [Delete all documents with dot in field name](https://discuss.elastic.co/t/delete-all-documents-with-dot-in-field-name/71732)

<div class="topic-metadata">

**Author:** [@Smasell](https://discuss.elastic.co/u/Smasell)\
**Replies:** 4\
**Last updated:** [January 16, 2017, 4:55pm UTC](https://discuss.elastic.co/t/delete-all-documents-with-dot-in-field-name/71732 "2017-01-16T16:55:09Z")

</div>

Hi! Can I delete all documents with dots in field name? Need it for ES upgrade.

---

## [Logstash kv and regex](https://discuss.elastic.co/t/logstash-kv-and-regex/57117)

<div class="topic-metadata">

**Author:** [@dihpierrick](https://discuss.elastic.co/u/dihpierrick)\
**Replies:** 4\
**Last updated:** [August 4, 2016, 9:06am UTC](https://discuss.elastic.co/t/logstash-kv-and-regex/57117 "2016-08-04T09:06:32Z")

</div>

Hi, I have got a question concerning the KV filter. Is it possible to use an regexp to get only the key matching the regex ? ? For example, if the message is : t\_1=qsdfgh t\_2=ploki p\_1=nbvcx t\_3=azerty I would l…

---

## [Performance impact of using a string of length 100 characters as \_Id column in Elastic Search](https://discuss.elastic.co/t/performance-impact-of-using-a-string-of-length-100-characters-as--id-column-in-elastic-search/38275)

<div class="topic-metadata">

**Author:** [@Harish\_Kommaraju](https://discuss.elastic.co/u/Harish_Kommaraju)\
**Replies:** 4\
**Last updated:** [January 5, 2016, 5:48pm UTC](https://discuss.elastic.co/t/performance-impact-of-using-a-string-of-length-100-characters-as--id-column-in-elastic-search/38275 "2016-01-05T17:48:36Z")

</div>

Hi, I am planning to store events in elastic search. It can have around 100 million events at any point time. To de-dupe events, I am planning to create \_id column of length 100 chars by concatenating below fields enti…

---

## [Read kibana on my phone](https://discuss.elastic.co/t/read-kibana-on-my-phone/34653)

<div class="topic-metadata">

**Author:** [@sylv](https://discuss.elastic.co/u/sylv)\
**Replies:** 4\
**Last updated:** [November 21, 2015, 5:51am UTC](https://discuss.elastic.co/t/read-kibana-on-my-phone/34653 "2015-11-21T05:51:19Z")

</div>

we use localhost for kibana and elasticsearch how is it possible to read the kibana page from / with an external iphone an external network... ? what's the new configuration?

---

## [Possible to have optional \_parent field in future?](https://discuss.elastic.co/t/possible-to-have-optional--parent-field-in-future/427)

<div class="topic-metadata">

**Author:** [@jaddison](https://discuss.elastic.co/u/jaddison)\
**Replies:** 4\
**Last updated:** [May 12, 2015, 3:56am UTC](https://discuss.elastic.co/t/possible-to-have-optional--parent-field-in-future/427 "2015-05-12T03:56:11Z")

</div>

Would it ever be feasible to have a parent/child relationship where the child mapping's \_parent field was optional? Last time I tried it, the results weren't pretty. I have this exactly scenario, where it's possible to…

---

## [DLQ - Managing Dead Letter Queue Size- To /dev/null?](https://discuss.elastic.co/t/dlq-managing-dead-letter-queue-size-to-dev-null/238162)

<div class="topic-metadata">

**Author:** [@scott\_stash](https://discuss.elastic.co/u/scott_stash)\
**Replies:** 3\
**Last updated:** [June 24, 2020, 2:06pm UTC](https://discuss.elastic.co/t/dlq-managing-dead-letter-queue-size-to-dev-null/238162 "2020-06-24T14:06:39Z")

</div>

Looking through the DLQ docs https://www.elastic.co/guide/en/logstash/current/dead-letter-queues.html it looks like I can set a maximum size for each DLQ file, but it sounds like the rollover will just create a new file. …

---

## [Dashboard repository?](https://discuss.elastic.co/t/dashboard-repository/215625)

<div class="topic-metadata">

**Author:** [@spacecabbie](https://discuss.elastic.co/u/spacecabbie)\
**Replies:** 3\
**Last updated:** [January 21, 2020, 7:45am UTC](https://discuss.elastic.co/t/dashboard-repository/215625 "2020-01-21T07:45:55Z")

</div>

Are there any atm ? I saw a post from 2014 but that repo is dead. If not are there any services that make them ?

---

## [Out of memory exception under high load](https://discuss.elastic.co/t/out-of-memory-exception-under-high-load/125267)

<div class="topic-metadata">

**Author:** [@Edward99](https://discuss.elastic.co/u/Edward99)\
**Replies:** 3\
**Last updated:** [March 26, 2018, 6:09pm UTC](https://discuss.elastic.co/t/out-of-memory-exception-under-high-load/125267 "2018-03-26T18:09:20Z")

</div>

Hi, Our logstash servers are only configured to use in-memory queue since we are still prototyping. We have experienced a few times that the logstash process exited because of an out-of-memory exception. This seems onl…

---

## [Multiple Logs in Kibana](https://discuss.elastic.co/t/multiple-logs-in-kibana/106788)

<div class="topic-metadata">

**Author:** [@regiereyes151985](https://discuss.elastic.co/u/regiereyes151985)\
**Replies:** 3\
**Last updated:** [November 9, 2017, 9:37pm UTC](https://discuss.elastic.co/t/multiple-logs-in-kibana/106788 "2017-11-09T21:37:43Z")

</div>

How to make it one entry the multiple event from event logs in Kibana? So far if we check in Kibana there are multiple entries but the same error/eventId.

---

## [Installation error on Kibana 5.0.0](https://discuss.elastic.co/t/installation-error-on-kibana-5-0-0/66433)

<div class="topic-metadata">

**Author:** [@Vicente\_Masip](https://discuss.elastic.co/u/Vicente_Masip)\
**Replies:** 3\
**Last updated:** [December 22, 2016, 8:38am UTC](https://discuss.elastic.co/t/installation-error-on-kibana-5-0-0/66433 "2016-12-22T08:38:53Z")

</div>

After installing fine in elasticSearch,it's the turn of kibana: $ /usr/share/kibana/bin/kibana-plugin install x-pack Attempting to transfer from x-pack Attempting to transfer from https://artifacts.elastic.co/downloads…

---

## [How to aggregate metrics from netdata in logstash?](https://discuss.elastic.co/t/how-to-aggregate-metrics-from-netdata-in-logstash/165265)

<div class="topic-metadata">

**Author:** [@EnzoAkira](https://discuss.elastic.co/u/EnzoAkira)\
**Replies:** 2\
**Last updated:** [January 22, 2019, 5:26pm UTC](https://discuss.elastic.co/t/how-to-aggregate-metrics-from-netdata-in-logstash/165265 "2019-01-22T17:26:46Z")

</div>

Thank you in advance for any help! I'm using Netdata to collect metrics from servers and then send them to Logstash and to Elastic. My need is to aggregate metrics with same fields and create a single event but in nest…

---

## [Snapshot index based on query](https://discuss.elastic.co/t/snapshot-index-based-on-query/136858)

<div class="topic-metadata">

**Author:** [@bipinbs](https://discuss.elastic.co/u/bipinbs)\
**Replies:** 2\
**Last updated:** [June 22, 2018, 5:24am UTC](https://discuss.elastic.co/t/snapshot-index-based-on-query/136858 "2018-06-22T05:24:22Z")

</div>

Hi, Currently, we have deployed elasticsearch in our kubernetes cluster where we have daily indices configured. Currently for multiple tenants we store logs in same index based on routing key. We have daily curator job …

---

## [Epoch time conversion is showing wrong time](https://discuss.elastic.co/t/epoch-time-conversion-is-showing-wrong-time/84409)

<div class="topic-metadata">

**Author:** [@kabali12345](https://discuss.elastic.co/u/kabali12345)\
**Replies:** 2\
**Last updated:** [May 3, 2017, 12:28pm UTC](https://discuss.elastic.co/t/epoch-time-conversion-is-showing-wrong-time/84409 "2017-05-03T12:28:58Z")

</div>

Hello everyone here i am trying to convert epoch time into human readable format where it is parsing good but indicating wrong point of time in target field i didn't get any error also here is my code: input { exe…

---

## [Grok or CSV?](https://discuss.elastic.co/t/grok-or-csv/68738)

<div class="topic-metadata">

**Author:** [@Mario\_van\_Gemert](https://discuss.elastic.co/u/Mario_van_Gemert)\
**Replies:** 2\
**Last updated:** [December 13, 2016, 8:55am UTC](https://discuss.elastic.co/t/grok-or-csv/68738 "2016-12-13T08:55:33Z")

</div>

I have some data which looks like this: John Doe;Debrah ;19,95;13-07-2016 M.C. Hammer;Susan;19;14-07-2015 The first represents a customer name, which sometimes exist of one name, two names, or names with periods (.) T…

---

## [Elastic Agent to Logstash](https://discuss.elastic.co/t/elastic-agent-to-logstash/266341)

<div class="topic-metadata">

**Author:** [@The1WhoPrtNocks](https://discuss.elastic.co/u/The1WhoPrtNocks)\
**Replies:** 4\
**Last updated:** [March 19, 2021, 4:50pm UTC](https://discuss.elastic.co/t/elastic-agent-to-logstash/266341 "2021-03-19T16:50:36Z")

</div>

Hi, I was wondering if there are any plans to allow for shipping Agent collected Logs to Logstash, this is to allow for further enrichment. I have had a quick google but could not find anything on this subject. Thanks…

---

## [Elastic agents are failing to connect with elastic apm server](https://discuss.elastic.co/t/elastic-agents-are-failing-to-connect-with-elastic-apm-server/325380)

<div class="topic-metadata">

**Author:** [@rahul\_sirugudi](https://discuss.elastic.co/u/rahul_sirugudi)\
**Replies:** 6\
**Last updated:** [February 13, 2023, 4:12pm UTC](https://discuss.elastic.co/t/elastic-agents-are-failing-to-connect-with-elastic-apm-server/325380 "2023-02-13T16:12:46Z")

</div>

I Have configured Elastic APM on filebeat server. In Java\_OPTS configured jar file. How ever i am seeing 2 errors when the agent is trying to make POST calls. Feb 13 06:15:37 ip-10-0-1-5.us-west-2.compute.internal serve…

---

## [Logstash asking filter file path](https://discuss.elastic.co/t/logstash-asking-filter-file-path/150538)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 6\
**Last updated:** [October 15, 2018, 9:35pm UTC](https://discuss.elastic.co/t/logstash-asking-filter-file-path/150538 "2018-10-15T21:35:42Z")

</div>

Hi , I am using logstash 6.3.2 . Installed from rpm . My issuse is my filter file's path is mentioned in logstash.yml . But again the logstash asking for filter file path . My conf: path.config: /etc/logstash/conf.d…

---

## [Beats ignores configuration yml](https://discuss.elastic.co/t/beats-ignores-configuration-yml/99644)

<div class="topic-metadata">

**Author:** [@Search9212](https://discuss.elastic.co/u/Search9212)\
**Replies:** 6\
**Last updated:** [September 8, 2017, 8:11pm UTC](https://discuss.elastic.co/t/beats-ignores-configuration-yml/99644 "2017-09-08T20:11:41Z")

</div>

My yml file validates and specifically uses a non-default logging directory along with other settings. The logs are put in the default locations along with other unexpected default behavior given my yml. Any ideas? f…

---

## [Is it possible to adjust the point to point settings?](https://discuss.elastic.co/t/is-it-possible-to-adjust-the-point-to-point-settings/272124)

<div class="topic-metadata">

**Author:** [@seanziee](https://discuss.elastic.co/u/seanziee)\
**Replies:** 2\
**Last updated:** [May 5, 2021, 11:36pm UTC](https://discuss.elastic.co/t/is-it-possible-to-adjust-the-point-to-point-settings/272124 "2021-05-05T23:36:47Z")

</div>

I'm a bit confused at the aggregation feature of the point to point functionality. I am showing connections between nodes in a network of about 20 machines and I would like the lines to terminate on the node so I can un…

---

## [Kubernetes integration on ECK Kibana Fleet policy sample](https://discuss.elastic.co/t/kubernetes-integration-on-eck-kibana-fleet-policy-sample/326024)

<div class="topic-metadata">

**Author:** [@Brian\_Brockel](https://discuss.elastic.co/u/Brian_Brockel)\
**Replies:** 0\
**Last updated:** [February 21, 2023, 5:08am UTC](https://discuss.elastic.co/t/kubernetes-integration-on-eck-kibana-fleet-policy-sample/326024 "2023-02-21T05:08:41Z")

</div>

Looking to deploy ECK from kubernetes manifest configuring a Kubernetes integration through a fleet agent policy defined in Kibana manifest yaml. Any well defined templates that could help me understand where I went wro…

---

## [Custom hostnames for agent deployments](https://discuss.elastic.co/t/custom-hostnames-for-agent-deployments/276997)

<div class="topic-metadata">

**Author:** [@netfire](https://discuss.elastic.co/u/netfire)\
**Replies:** 0\
**Last updated:** [June 25, 2021, 2:49am UTC](https://discuss.elastic.co/t/custom-hostnames-for-agent-deployments/276997 "2021-06-25T02:49:17Z")

</div>

I'm testing out fleet. I would like the agents and associated beats to utilize a hostname I provide (or using a template of some sort). The issue I have is that windows hosts are not using the FQDN (in my case it would b…

---

## [Overriding HTTP\_Poller SSL Input](https://discuss.elastic.co/t/overriding-http-poller-ssl-input/211384)

<div class="topic-metadata">

**Author:** [@RunningSmurf](https://discuss.elastic.co/u/RunningSmurf)\
**Replies:** 0\
**Last updated:** [December 10, 2019, 10:07pm UTC](https://discuss.elastic.co/t/overriding-http-poller-ssl-input/211384 "2019-12-10T22:07:38Z")

</div>

Good afternoon, I am trying to setup a pipeline using HTTP\_Poller, and would like to override the SSL requirement, but to no avail. I have tried several option found in forums, but still get the following error: PKIX …

---

## [Kubernetes + Auto-discovery + dedot](https://discuss.elastic.co/t/kubernetes-auto-discovery-dedot/201304)

<div class="topic-metadata">

**Author:** [@larslevie](https://discuss.elastic.co/u/larslevie)\
**Replies:** 0\
**Last updated:** [September 26, 2019, 7:18pm UTC](https://discuss.elastic.co/t/kubernetes-auto-discovery-dedot/201304 "2019-09-26T19:18:36Z")

</div>

With Filebeat 6.8.0, where exactly do the labels.dedot and annotations.dedot options go in the Filebeat config when using autodiscovery? Lack of dedotting is responsible for errors like: failed to parse field \[kubernet…

---

## [Setup ES 5.6.0 using Helm Stable Chart](https://discuss.elastic.co/t/setup-es-5-6-0-using-helm-stable-chart/167721)

<div class="topic-metadata">

**Author:** [@murtaza1983](https://discuss.elastic.co/u/murtaza1983)\
**Replies:** 0\
**Last updated:** [February 9, 2019, 3:11pm UTC](https://discuss.elastic.co/t/setup-es-5-6-0-using-helm-stable-chart/167721 "2019-02-09T15:11:10Z")

</div>

Is it possible to setup ES-5.6.0 using Helm Stable chart? If not what are other possible solutions?

---

## [The number of nested documents has exceeded the allowed limit of \[10000\]](https://discuss.elastic.co/t/the-number-of-nested-documents-has-exceeded-the-allowed-limit-of-10000/328852)

<div class="topic-metadata">

**Author:** [@elk-user-0001](https://discuss.elastic.co/u/elk-user-0001)\
**Replies:** 0\
**Last updated:** [March 29, 2023, 5:02pm UTC](https://discuss.elastic.co/t/the-number-of-nested-documents-has-exceeded-the-allowed-limit-of-10000/328852 "2023-03-29T17:02:00Z")

</div>

Hello! We are reciving the following error: The number of nested documents has exceeded the allowed limit of \[10000\]. This limit can be set by changing the \[index.mapping.nested\_objects.limit\] index level setting. We …

---

## [How many number of aliases should be created on single index?](https://discuss.elastic.co/t/how-many-number-of-aliases-should-be-created-on-single-index/310868)

<div class="topic-metadata">

**Author:** [@Vaibhav\_Tandale](https://discuss.elastic.co/u/Vaibhav_Tandale)\
**Replies:** 8\
**Last updated:** [July 29, 2022, 4:33am UTC](https://discuss.elastic.co/t/how-many-number-of-aliases-should-be-created-on-single-index/310868 "2022-07-29T04:33:07Z")

</div>

how many number of aliases should be created on single index? is there any hard limit for number of aliases on index/cluster?

---

## [Failed to retrieve password hash for reserved user \[elastic\]](https://discuss.elastic.co/t/failed-to-retrieve-password-hash-for-reserved-user-elastic/286255)

<div class="topic-metadata">

**Author:** [@rachelyang](https://discuss.elastic.co/u/rachelyang)\
**Replies:** 1\
**Last updated:** [October 10, 2021, 10:43pm UTC](https://discuss.elastic.co/t/failed-to-retrieve-password-hash-for-reserved-user-elastic/286255 "2021-10-10T22:43:06Z")

</div>

I have verified the password of user elastic. curl -k -u elastic 'https://localhost:9200/\_xpack/security/\_authenticate?pretty' Enter host password for user 'elastic': { "username" : "elastic", "roles" : \[ "supe…

---

## [How to reduce elasticsearch memory usage](https://discuss.elastic.co/t/how-to-reduce-elasticsearch-memory-usage/207997)

<div class="topic-metadata">

**Author:** [@lovelly](https://discuss.elastic.co/u/lovelly)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 7:44am UTC](https://discuss.elastic.co/t/how-to-reduce-elasticsearch-memory-usage/207997 "2019-11-15T07:44:39Z")

</div>

I use the bulk api to insert a lot of data. Elasticsearch will quickly consume memory and then crash. elasticsearcg log : \[2019-11-15T14:13:00,235\]\[INFO \]\[o.e.m.j.JvmGcMonitorService\] \[es1\] \[gc\]\[1287\] overhead, spent \[…

---

## [Is it possible to run a query with NO term and ONLY filters?](https://discuss.elastic.co/t/is-it-possible-to-run-a-query-with-no-term-and-only-filters/34732)

<div class="topic-metadata">

**Author:** [@tbessie](https://discuss.elastic.co/u/tbessie)\
**Replies:** 7\
**Last updated:** [November 18, 2015, 5:34pm UTC](https://discuss.elastic.co/t/is-it-possible-to-run-a-query-with-no-term-and-only-filters/34732 "2015-11-18T17:34:22Z")

</div>

I have a case where I want exact matches ONLY only some fields, but NO query term. Is this possible? I've tried it (using Elasticsearch 1.5.2 - haven't upgraded to 2.0.0 yet), and it returns no results when I provide a…

---

## [Segregate Multiple Applications per each ELK Instance](https://discuss.elastic.co/t/segregate-multiple-applications-per-each-elk-instance/310019)

<div class="topic-metadata">

**Author:** [@amseshadri](https://discuss.elastic.co/u/amseshadri)\
**Replies:** 5\
**Last updated:** [July 20, 2022, 4:25pm UTC](https://discuss.elastic.co/t/segregate-multiple-applications-per-each-elk-instance/310019 "2022-07-20T16:25:37Z")

</div>

Hi, I am a newbie to ELK, exploring the things from few days. Using the ELK 8.1.4 version We recently got the ELK Stack installed as a SaaS in our Azure Cloud Subscription. So we have one instance of ELK in each envir…

---

## [Logstash CSV mutate, split and filter](https://discuss.elastic.co/t/logstash-csv-mutate-split-and-filter/301084)

<div class="topic-metadata">

**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\
**Replies:** 5\
**Last updated:** [April 23, 2022, 9:44am UTC](https://discuss.elastic.co/t/logstash-csv-mutate-split-and-filter/301084 "2022-04-23T09:44:15Z")

</div>

Hello, I hope my message finds the Elastic community safe and healthy. I am trying to import CSV files wherein I want to create a new field - tld using data from one of the columns being imported. Source Column name…

---

## [How To read in logstash the response from elasticsearch using elasticsearch output plugin](https://discuss.elastic.co/t/how-to-read-in-logstash-the-response-from-elasticsearch-using-elasticsearch-output-plugin/288135)

<div class="topic-metadata">

**Author:** [@yeppazu](https://discuss.elastic.co/u/yeppazu)\
**Replies:** 5\
**Last updated:** [November 1, 2021, 2:16pm UTC](https://discuss.elastic.co/t/how-to-read-in-logstash-the-response-from-elasticsearch-using-elasticsearch-output-plugin/288135 "2021-11-01T14:16:31Z")

</div>

Hi :slight\_smile: there is a some method to read response from Elasticsearch and trigger an action over it? (eg: running script, call an http url, ...) Normally, elastic return a JSON after HTTP index request. This JSO…

---

## [Why elasticseach 5.1 bool filter query runs slower than elasticsearch 1.5 filtered query?](https://discuss.elastic.co/t/why-elasticseach-5-1-bool-filter-query-runs-slower-than-elasticsearch-1-5-filtered-query/87686)

<div class="topic-metadata">

**Author:** [@Branel\_Moro](https://discuss.elastic.co/u/Branel_Moro)\
**Replies:** 5\
**Last updated:** [June 13, 2017, 5:16pm UTC](https://discuss.elastic.co/t/why-elasticseach-5-1-bool-filter-query-runs-slower-than-elasticsearch-1-5-filtered-query/87686 "2017-06-13T17:16:36Z")

</div>

Following is my elastic search - 1.5 Query: { "\_source":\["\_id","spotlight"\], "query":{ "filtered":{ "filter":{ "and":\[ {"term":{"gender":"female"}}, …

---

## [Alerts dont match time on server](https://discuss.elastic.co/t/alerts-dont-match-time-on-server/281604)

<div class="topic-metadata">

**Author:** [@nwenner76](https://discuss.elastic.co/u/nwenner76)\
**Replies:** 2\
**Last updated:** [August 20, 2021, 9:49pm UTC](https://discuss.elastic.co/t/alerts-dont-match-time-on-server/281604 "2021-08-20T21:49:03Z")

</div>

Running Wazuh 7.10.02. Host, Wazuh, and Kibana show the right time, but when I get the alerts in my email, the body of the email shows the wrong time. Setup is all on the same server. All systems are in the same office…

---

## [Set default index automatically in new spaces](https://discuss.elastic.co/t/set-default-index-automatically-in-new-spaces/178152)

<div class="topic-metadata">

**Author:** [@Steven\_Ensslen](https://discuss.elastic.co/u/Steven_Ensslen)\
**Replies:** 2\
**Last updated:** [April 24, 2019, 9:53pm UTC](https://discuss.elastic.co/t/set-default-index-automatically-in-new-spaces/178152 "2019-04-24T21:53:39Z")

</div>

I'm using the Rest API to create spaces for all of my different user groups in my Kibana 6.7.1 hosted in Elastic Cloud. How do I set the default index in all of the spaces without having to use the web interface? I've …

[Previous page](https://discuss.elastic.co/top.md?page=1123&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1125&per_page=50&period=all)
