# Top **URL:** https://discuss.elastic.co/top.md?page=1141&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1142 --- ## [Max\_thread\_count:1 -- even with w/high performance magnetic RAID?](https://discuss.elastic.co/t/max-thread-count-1-even-with-w-high-performance-magnetic-raid/45604)
**Author:** [@unknownunknown](https://discuss.elastic.co/u/unknownunknown)\ **Replies:** 4\ **Last updated:** [March 31, 2016, 6:20pm UTC](https://discuss.elastic.co/t/max-thread-count-1-even-with-w-high-performance-magnetic-raid/45604 "2016-03-31T18:20:27Z")
Standard guidance suggests index.merge.scheduler.max\_thread\_count always be limited to 1 when using magnetic disks. Benchmarking shows my server can get around 1.2Gbps throughput. Should there be any penalty from incre… --- ## [How to disable replicas for existing indices](https://discuss.elastic.co/t/how-to-disable-replicas-for-existing-indices/174888)
**Author:** [@kotarusv](https://discuss.elastic.co/u/kotarusv)\ **Replies:** 2\ **Last updated:** [April 2, 2019, 12:22am UTC](https://discuss.elastic.co/t/how-to-disable-replicas-for-existing-indices/174888 "2019-04-02T00:22:25Z")
hI we are using elastic search for logging purpose and don't want to have replicas=1 for every primary index. It is ok to have replicas=0 for our environment as logs are not critical. how to disable replicas=0 permanen… --- ## [Error Elastic Stack Logging lab 3](https://discuss.elastic.co/t/error-elastic-stack-logging-lab-3/88102)
**Author:** [@Rtelman](https://discuss.elastic.co/u/Rtelman)\ **Replies:** 2\ **Last updated:** [June 3, 2017, 1:04am UTC](https://discuss.elastic.co/t/error-elastic-stack-logging-lab-3/88102 "2017-06-03T01:04:08Z")
Hi, I'm following the Elastic Stack Logging course and ran into an issue in lab 3. I configured TOPbeat as instructed and downloaded the Dashboard. Logging into Kibana I received the following error: No matching indic… --- ## [Multiline codec and JDBC](https://discuss.elastic.co/t/multiline-codec-and-jdbc/49727)
**Author:** [@berguiz1](https://discuss.elastic.co/u/berguiz1)\ **Replies:** 2\ **Last updated:** [May 12, 2016, 7:03am UTC](https://discuss.elastic.co/t/multiline-codec-and-jdbc/49727 "2016-05-12T07:03:46Z")
Hello everybody, I'm trying to use the multiline codec with the ids of rows from a table (Database). i've an input plugin with JDBC which give me some rows with same id (because of the SQL query). I would like to process… --- ## [Download Elasticsearch plugin behind proxy](https://discuss.elastic.co/t/download-elasticsearch-plugin-behind-proxy/231283)
**Author:** [@haythem](https://discuss.elastic.co/u/haythem)\ **Replies:** 3\ **Last updated:** [May 7, 2020, 7:03am UTC](https://discuss.elastic.co/t/download-elasticsearch-plugin-behind-proxy/231283 "2020-05-07T07:03:58Z")
Hi guys , i was wondering how to add proxy parameters to elasticsearch to download plugin ? i've tried following these steps but nothing happened https://www.elastic.co/guide/en/elasticsearch/plugins/current/\_other\_comma… --- ## [User input to tag document](https://discuss.elastic.co/t/user-input-to-tag-document/117473)
**Author:** [@redacted](https://discuss.elastic.co/u/redacted)\ **Replies:** 3\ **Last updated:** [January 29, 2018, 4:17pm UTC](https://discuss.elastic.co/t/user-input-to-tag-document/117473 "2018-01-29T16:17:48Z")
I have looked around and it seems that this is not feasible as of yet in Kibana. what I am looking to do is add some type of input, button, check box, text input field whatever. So my users can "tag" and event for other… --- ## [MapperParsingException after migrating Java client from ES 2.3.3 to 5.5.0](https://discuss.elastic.co/t/mapperparsingexception-after-migrating-java-client-from-es-2-3-3-to-5-5-0/92670)
**Author:** [@mcelaya](https://discuss.elastic.co/u/mcelaya)\ **Replies:** 8\ **Last updated:** [July 12, 2017, 2:56pm UTC](https://discuss.elastic.co/t/mapperparsingexception-after-migrating-java-client-from-es-2-3-3-to-5-5-0/92670 "2017-07-12T14:56:53Z")
Hi! We have been using ES version 2.3.3 and a java process (using the BulkProcessor) on the same version on pre-prod to feed data to ES. However, we thought it would be best if we could migrate to 5.5.0 before going l… --- ## [QueryString query on not\_analyzed field](https://discuss.elastic.co/t/querystring-query-on-not-analyzed-field/18319)
**Author:** [@Aaron\_Martin\_Bermejo](https://discuss.elastic.co/u/Aaron_Martin_Bermejo)\ **Replies:** 3\ **Last updated:** [July 4, 2014, 11:08am UTC](https://discuss.elastic.co/t/querystring-query-on-not-analyzed-field/18319 "2014-07-04T11:08:59Z")
Hello, My problem is that I have a not\_analyzed field and I'm doing a query\_string query over it searching the first word of the field. That query doesn't return anything. It can be reproduced doing the next steps… --- ## ["TypeError: You provided 'undefined' where a stream was expected. You can provide an Observable](https://discuss.elastic.co/t/typeerror-you-provided-undefined-where-a-stream-was-expected-you-can-provide-an-observable/320056)
**Author:** [@Rajitha\_Bizz](https://discuss.elastic.co/u/Rajitha_Bizz)\ **Replies:** 0\ **Last updated:** [November 29, 2022, 2:12pm UTC](https://discuss.elastic.co/t/typeerror-you-provided-undefined-where-a-stream-was-expected-you-can-provide-an-observable/320056 "2022-11-29T14:12:38Z")
I facing this issue when we update kibana from 7.10.2 to 7.17.7. It is kind of strange behavior, there is a nginx proxy in between. {"type":"log","@timestamp":"2022-11-29T13:32:08+00:00","tags":\["error","http"\],"pid":2… --- ## [Not possible to emit List for keyword runtime field](https://discuss.elastic.co/t/not-possible-to-emit-list-for-keyword-runtime-field/285397)
**Author:** [@tomhe](https://discuss.elastic.co/u/tomhe)\ **Replies:** 1\ **Last updated:** [October 7, 2021, 1:53pm UTC](https://discuss.elastic.co/t/not-possible-to-emit-list-for-keyword-runtime-field/285397 "2021-10-07T13:53:37Z")
In Elasticsearch 7.15.0, I am unable to emit a list of strings for a keyword runtime field: PUT warning PUT warning/\_mapping { "dynamic": false, "runtime": { "Warning": { "type": "keyword", "script"… --- ## [Get last document string value in each bucket](https://discuss.elastic.co/t/get-last-document-string-value-in-each-bucket/260013)
**Author:** [@Metheny](https://discuss.elastic.co/u/Metheny)\ **Replies:** 1\ **Last updated:** [January 2, 2021, 4:43pm UTC](https://discuss.elastic.co/t/get-last-document-string-value-in-each-bucket/260013 "2021-01-02T16:43:27Z")
I have a reports index and I need to count the number of reports per-user that have a specific string (keyword) field value in their last document (sorted by time) in some time range. I tried bucketing by user -\> top (1… --- ## [Elasticsearch MMAPFS -\> Swap](https://discuss.elastic.co/t/elasticsearch-mmapfs-swap/239873)
**Author:** [@icm](https://discuss.elastic.co/u/icm)\ **Replies:** 7\ **Last updated:** [July 4, 2020, 1:58pm UTC](https://discuss.elastic.co/t/elasticsearch-mmapfs-swap/239873 "2020-07-04T13:58:58Z")
Hi, At our company we have a 6.1 cluster. To prepare for the upgrade to 6.8+ onwards, we've started rolling out new machines to Focal Fossa / Ubuntu 20.04 instead of Ubuntu 18.04. The cluster consists of 4 data nodes, … --- ## [Error: Uncaught TypeError: Cannot read property 'scripted' of undefined](https://discuss.elastic.co/t/error-uncaught-typeerror-cannot-read-property-scripted-of-undefined/184857)
**Author:** [@madcon](https://discuss.elastic.co/u/madcon)\ **Replies:** 1\ **Last updated:** [June 14, 2019, 2:30pm UTC](https://discuss.elastic.co/t/error-uncaught-typeerror-cannot-read-property-scripted-of-undefined/184857 "2019-06-14T14:30:31Z")
Dear All, Good day! We are currently using ELK stack version 6.7.1 build 20266 on production. I'm trying to build a dashboard for our security monitoring tool then suddenly encountered the following error after uploadi… --- ## [java.lang.VerifyError with java agent](https://discuss.elastic.co/t/java-lang-verifyerror-with-java-agent/156882)
**Author:** [@Wolfram\_Haussig](https://discuss.elastic.co/u/Wolfram_Haussig)\ **Replies:** 7\ **Last updated:** [November 16, 2018, 7:32am UTC](https://discuss.elastic.co/t/java-lang-verifyerror-with-java-agent/156882 "2018-11-16T07:32:42Z")
Hello, I am currently playing with Elastic Stack and APM. I have installed ElasticSearch 6.4.3 and APM-Server 6.5.0 without errors. On a tomcat 8.0.x I added the following options: -javaagent:/home/user/apm-server-6.5… --- ## [Kafka output plugin not working](https://discuss.elastic.co/t/kafka-output-plugin-not-working/147187)
**Author:** [@asatsi](https://discuss.elastic.co/u/asatsi)\ **Replies:** 1\ **Last updated:** [September 5, 2018, 5:38am UTC](https://discuss.elastic.co/t/kafka-output-plugin-not-working/147187 "2018-09-05T05:38:40Z")
Hi, I am trying to push logs onto a kafka topic. Has anybody successfully used Kafka output plugin in logstash? Tried with logstash version: 6.3.2/6.4.0 but same result. Below is my config file: input { file { path… --- ## [Transform array objects in fields](https://discuss.elastic.co/t/transform-array-objects-in-fields/121269)
**Author:** [@Leonardo\_Santana](https://discuss.elastic.co/u/Leonardo_Santana)\ **Replies:** 1\ **Last updated:** [February 26, 2018, 12:08pm UTC](https://discuss.elastic.co/t/transform-array-objects-in-fields/121269 "2018-02-26T12:08:05Z")
hi, I have a object like this: "fields": \[ { "value": "123", "id": "0" }, { "value": "456", "id": "1" }, { "value": "llllobj", "id": "2" } \] but i want change the id to a field in my object like this: "f… --- ## [Search using regular expression in Kibana](https://discuss.elastic.co/t/search-using-regular-expression-in-kibana/65888)
**Author:** [@krishna\_chaitanya](https://discuss.elastic.co/u/krishna_chaitanya)\ **Replies:** 1\ **Last updated:** [November 13, 2016, 3:56pm UTC](https://discuss.elastic.co/t/search-using-regular-expression-in-kibana/65888 "2016-11-13T15:56:45Z")
I am newbie to ELK. I want to search for docs based on order of occurrence of words in a field. For example, In doc1, my\_field: "MY FOO BAR EXAMPLE" In doc2, my\_field: "MY BAR FOO EXAMPLE" I would like to query in K… --- ## [Problem with Ruby Filter](https://discuss.elastic.co/t/problem-with-ruby-filter/231408)
**Author:** [@rildo](https://discuss.elastic.co/u/rildo)\ **Replies:** 6\ **Last updated:** [May 7, 2020, 3:23pm UTC](https://discuss.elastic.co/t/problem-with-ruby-filter/231408 "2020-05-07T15:23:40Z")
Hello People, I would like a help with my problem. Currently I have a database with postgresql and I have some queries in logstash to extract some information and send it to elasticsearch.One query return a list of da… --- ## [Bulk update caused DocumentMissing after Bulk Insert](https://discuss.elastic.co/t/bulk-update-caused-documentmissing-after-bulk-insert/176808)
**Author:** [@Zt\_Zeng](https://discuss.elastic.co/u/Zt_Zeng)\ **Replies:** 6\ **Last updated:** [April 27, 2019, 5:17am UTC](https://discuss.elastic.co/t/bulk-update-caused-documentmissing-after-bulk-insert/176808 "2019-04-27T05:17:42Z")
I am working on a tool which sync change from MySQL to ES. When I am testing the tool, I find some thing that can't understand. Then following is some log: # bulk insert about 100 docs 2019-04-14 11:16:26,049 index {\[te… --- ## [Very slow query on index cluster with 34B documents](https://discuss.elastic.co/t/very-slow-query-on-index-cluster-with-34b-documents/40100)
**Author:** [@Slava\_G](https://discuss.elastic.co/u/Slava_G)\ **Replies:** 6\ **Last updated:** [January 26, 2016, 10:44am UTC](https://discuss.elastic.co/t/very-slow-query-on-index-cluster-with-34b-documents/40100 "2016-01-26T10:44:56Z")
Hi, I have cluster that has 2 indexes that has 20B documents and 14B documents each. 85% of of the documents are from one type and other 15% are all other types. When I'm doing any query on the types form 15% the query… --- ## [LOGSTASH / Kibana4 - Question](https://discuss.elastic.co/t/logstash-kibana4-question/29348)
**Author:** [@Luis\_Lacayo](https://discuss.elastic.co/u/Luis_Lacayo)\ **Replies:** 6\ **Last updated:** [September 16, 2015, 4:36am UTC](https://discuss.elastic.co/t/logstash-kibana4-question/29348 "2015-09-16T04:36:07Z")
I have a question, I am trying to graph application response times on NGINX logs. I am trying to graph the response time base on a field called request\_duration. My logs look like this: 216.165.152.226 - - \[09/Sep… --- ## [Bulk via curl not working in data in file?](https://discuss.elastic.co/t/bulk-via-curl-not-working-in-data-in-file/3490)
**Author:** [@Lukas\_Vlcek1](https://discuss.elastic.co/u/Lukas_Vlcek1)\ **Replies:** 6\ **Last updated:** [February 25, 2014, 10:13am UTC](https://discuss.elastic.co/t/bulk-via-curl-not-working-in-data-in-file/3490 "2014-02-25T10:13:17Z")
Hi, I am having troubles executing bulk operations via curl if the bulk command sequence is in file. The following works fine: curl -XDELETE 'http://localhost:9200/test/?pretty=1' curl -XPUT 'http://localhos… --- ## [Question about data stream rollover timings](https://discuss.elastic.co/t/question-about-data-stream-rollover-timings/325073)
**Author:** [@xnn](https://discuss.elastic.co/u/xnn)\ **Replies:** 5\ **Last updated:** [February 11, 2023, 3:35am UTC](https://discuss.elastic.co/t/question-about-data-stream-rollover-timings/325073 "2023-02-11T03:35:04Z")
We're considering moving some large ES clusters from time-based indices to data streams. One concern we have is that with time-based indices we notice a delay between when the first event arrives and when the shards are … --- ## [Infinite extent for field "\" : \[Infinity, -Infinity\]](https://discuss.elastic.co/t/infinite-extent-for-field-field-name-infinity-infinity/323523)
**Author:** [@Kamil\_BdBelfort](https://discuss.elastic.co/u/Kamil_BdBelfort)\ **Replies:** 5\ **Last updated:** [January 19, 2023, 2:26pm UTC](https://discuss.elastic.co/t/infinite-extent-for-field-field-name-infinity-infinity/323523 "2023-01-19T14:26:55Z")
Hi there, I am using elasticsearch & kibana version 8.5.3 This is how my data look like when I run my script: Inspect \> View Request \> Vega debug \> Spec: { "$schema": "https://vega.github.io/schema/vega-lite/v5.j… --- ## [Error in using EXEC filter for curl](https://discuss.elastic.co/t/error-in-using-exec-filter-for-curl/282459)
**Author:** [@Gauti](https://discuss.elastic.co/u/Gauti)\ **Replies:** 5\ **Last updated:** [August 27, 2021, 7:27am UTC](https://discuss.elastic.co/t/error-in-using-exec-filter-for-curl/282459 "2021-08-27T07:27:35Z")
Hi All, We have a scenario where through curl we are getting some output, when tried the curl command directly we are getting the output. curl --location --request POST 'https://demo.cloud.ie/api/v2/analytics/conversat… --- ## [Filebeat's Multiline not grouping properly](https://discuss.elastic.co/t/filebeats-multiline-not-grouping-properly/148711)
**Author:** [@kellen.hopwood](https://discuss.elastic.co/u/kellen.hopwood)\ **Replies:** 5\ **Last updated:** [September 18, 2018, 2:35pm UTC](https://discuss.elastic.co/t/filebeats-multiline-not-grouping-properly/148711 "2018-09-18T14:35:18Z")
Hi All, I am using filebeats to try and pull from a text file that contains http logs, the logs are generally not uniform, so I used powershell to create an end of file marker. However when I then try and send the logs … --- ## [Trace id and span id is not getting appeneded to the logs when using elastic apm Java agent](https://discuss.elastic.co/t/trace-id-and-span-id-is-not-getting-appeneded-to-the-logs-when-using-elastic-apm-java-agent/366727)
**Author:** [@apurva12](https://discuss.elastic.co/u/apurva12)\ **Replies:** 4\ **Last updated:** [September 23, 2024, 10:32am UTC](https://discuss.elastic.co/t/trace-id-and-span-id-is-not-getting-appeneded-to-the-logs-when-using-elastic-apm-java-agent/366727 "2024-09-23T10:32:04Z")
We have springboot application which uses micrometer tracing bridge otel library to get traces and span. This is working as expected with plain springboot application. When adding elastic apm Java agent trace id, span id… --- ## [Big index vs small ones - querying only subset of the data each time](https://discuss.elastic.co/t/big-index-vs-small-ones-querying-only-subset-of-the-data-each-time/103065)
**Author:** [@Oferkes](https://discuss.elastic.co/u/Oferkes)\ **Replies:** 4\ **Last updated:** [October 8, 2017, 5:13am UTC](https://discuss.elastic.co/t/big-index-vs-small-ones-querying-only-subset-of-the-data-each-time/103065 "2017-10-08T05:13:30Z")
Hi, i have a daily index with a size of 400GB, ~300M documents, and 9 primary shards (no replicas). the indices are created on a daily basis, and for each new index that is created, the previous one is forced merged to… --- ## [How to migrate a field type](https://discuss.elastic.co/t/how-to-migrate-a-field-type/3677)
**Author:** [@John\_Chang](https://discuss.elastic.co/u/John_Chang)\ **Replies:** 4\ **Last updated:** [January 7, 2011, 1:44pm UTC](https://discuss.elastic.co/t/how-to-migrate-a-field-type/3677 "2011-01-07T13:44:57Z")
I have dates mapped as strings, which was a mistake, and I need them mapped as longs so as to sort on them successfully (as I've been advised in previous threads - thanks!). How can I handle this migration? A few o… --- ## [Elasticsearch 8.1 - python security client issues](https://discuss.elastic.co/t/elasticsearch-8-1-python-security-client-issues/302162)
**Author:** [@Aldo2](https://discuss.elastic.co/u/Aldo2)\ **Replies:** 2\ **Last updated:** [April 12, 2022, 3:43pm UTC](https://discuss.elastic.co/t/elasticsearch-8-1-python-security-client-issues/302162 "2022-04-12T15:43:54Z")
Hi Elastic Community, We are having problems trying to connect a python (2.7.5) client to Elasticsearch 8.1 (with security enabled). We have tried the following example code: from elasticsearch import Elasticsearch fr… --- ## [Elasticsearch ca certificate not found when connecting via browser](https://discuss.elastic.co/t/elasticsearch-ca-certificate-not-found-when-connecting-via-browser/202600)
**Author:** [@cowensel](https://discuss.elastic.co/u/cowensel)\ **Replies:** 2\ **Last updated:** [October 9, 2019, 3:40pm UTC](https://discuss.elastic.co/t/elasticsearch-ca-certificate-not-found-when-connecting-via-browser/202600 "2019-10-09T15:40:41Z")
I am currently trying to generate a certificate that will allow us to connect to kibana from a remote browser with the FQDN subdomain.domain.com. I am having trouble finding a way to for the browser to find the CA certif… --- ## [Mapper \[xxxx\] of different type, current\_type \[date\], merged\_type \[text\]](https://discuss.elastic.co/t/mapper-xxxx-of-different-type-current-type-date-merged-type-text/158626)
**Author:** [@Saad\_Rabhi](https://discuss.elastic.co/u/Saad_Rabhi)\ **Replies:** 2\ **Last updated:** [November 30, 2018, 9:39am UTC](https://discuss.elastic.co/t/mapper-xxxx-of-different-type-current-type-date-merged-type-text/158626 "2018-11-30T09:39:19Z")
Hi everybody, I'm a newbie on ELK and for some unknown reasons, as it was working without any changes on my side in any configuration, I'm facing to following issue : mapper \[hits.data.billing\_address.postal\_code\] of d… --- ## [How to avoid deleting .kibana using curator](https://discuss.elastic.co/t/how-to-avoid-deleting-kibana-using-curator/78058)
**Author:** [@Ximeng\_Zhao](https://discuss.elastic.co/u/Ximeng_Zhao)\ **Replies:** 2\ **Last updated:** [March 10, 2017, 1:11pm UTC](https://discuss.elastic.co/t/how-to-avoid-deleting-kibana-using-curator/78058 "2017-03-10T13:11:48Z")
Hi All, I want to delete all my indices order than 5 days except .kibana, I think the following script is still deleting .kibana, Is there anyone can help me modify this? Thanks. actions: 1: action: delete\_in… --- ## [Perl Script to insert data into ES ~13M to ~17M documents a day](https://discuss.elastic.co/t/perl-script-to-insert-data-into-es-13m-to-17m-documents-a-day/9709)
**Author:** [@Richard\_Pardue](https://discuss.elastic.co/u/Richard_Pardue)\ **Replies:** 2\ **Last updated:** [November 14, 2012, 12:26pm UTC](https://discuss.elastic.co/t/perl-script-to-insert-data-into-es-13m-to-17m-documents-a-day/9709 "2012-11-14T12:26:34Z")
Fast background on System setup: 5 Nodes (JVM defaults setting) 10 shards; 0 replicas per index (indexes based on date) Cluster Templates for new index base on git logstash - Works great === Template Start === { … --- ## [Error while fetching resource (Forbidden 403) for APM transactions on Kibana](https://discuss.elastic.co/t/error-while-fetching-resource-forbidden-403-for-apm-transactions-on-kibana/257447)
**Author:** [@Judeee](https://discuss.elastic.co/u/Judeee)\ **Replies:** 1\ **Last updated:** [December 3, 2020, 10:43am UTC](https://discuss.elastic.co/t/error-while-fetching-resource-forbidden-403-for-apm-transactions-on-kibana/257447 "2020-12-03T10:43:22Z")
Hello support, When I expand the APM transactions on kibana web console, I faces the error message below. " Error while fetching resource Error Forbidden (403) URL https://kibana.xxxx.com/api/apm/settings/custom\_link… --- ## [\[Logstash\] Peut-on supprimer un backslash?](https://discuss.elastic.co/t/logstash-peut-on-supprimer-un-backslash/201416)
**Author:** [@Travis](https://discuss.elastic.co/u/Travis)\ **Replies:** 3\ **Last updated:** [September 30, 2019, 10:24am UTC](https://discuss.elastic.co/t/logstash-peut-on-supprimer-un-backslash/201416 "2019-09-30T10:24:59Z")
Bonjour, J'arrive bien à supprimer plusieurs caractères spéciaux : filter { mutate { gsub =\> \["message", "\\\[", ""\] gsub =\> \["message", "\\\]", ""\] gsub =\> \["message", "\\(", ""\] gsub =\> \["message", "\\)",… --- ## [Aggregation using execution\_hit: map automatically filtered empty string key](https://discuss.elastic.co/t/aggregation-using-execution-hit-map-automatically-filtered-empty-string-key/95445)
**Author:** [@wd3790281](https://discuss.elastic.co/u/wd3790281)\ **Replies:** 3\ **Last updated:** [August 7, 2017, 2:50am UTC](https://discuss.elastic.co/t/aggregation-using-execution-hit-map-automatically-filtered-empty-string-key/95445 "2017-08-07T02:50:10Z")
Hi guys, I’m using execution\_hint: map in my aggregation to ensure my aggs run in fast speed. However, I have a key which is "". But the aggregation result doesn’t contain that bucket. I’m using terms aggregation. Do it… --- ## [Incorrect CPU usage and core count reading in metricbeat](https://discuss.elastic.co/t/incorrect-cpu-usage-and-core-count-reading-in-metricbeat/193722)
**Author:** [@mafshin](https://discuss.elastic.co/u/mafshin)\ **Replies:** 2\ **Last updated:** [August 13, 2019, 10:47am UTC](https://discuss.elastic.co/t/incorrect-cpu-usage-and-core-count-reading-in-metricbeat/193722 "2019-08-13T10:47:44Z")
I'm using system.cpu.total.norm.pct for average CPU usage but in some of the servers the reading is incorrect, which I guess is probably related to incorrect reading of system.cpu.cores CPU usage reported by system.cpu.… --- ## [Is it possible to remove unenrolled Agents from Fleet?](https://discuss.elastic.co/t/is-it-possible-to-remove-unenrolled-agents-from-fleet/345286)
**Author:** [@miela](https://discuss.elastic.co/u/miela)\ **Replies:** 1\ **Last updated:** [October 18, 2023, 1:07pm UTC](https://discuss.elastic.co/t/is-it-possible-to-remove-unenrolled-agents-from-fleet/345286 "2023-10-18T13:07:49Z")
Hi, I did see the following question: Is it possible to remove Inactive Agents from Fleet? And actually there is an undocumented (and potentially dangerous) way to remove unenrolled agents. Because I couldn't add my an… --- ## [Master\_not\_discovered\_exception](https://discuss.elastic.co/t/master-not-discovered-exception/280225)
**Author:** [@prithvirajsivarajan](https://discuss.elastic.co/u/prithvirajsivarajan)\ **Replies:** 1\ **Last updated:** [August 2, 2021, 1:31pm UTC](https://discuss.elastic.co/t/master-not-discovered-exception/280225 "2021-08-02T13:31:30Z")
I have an elasticsearch cluster with 2 nodes. When I stop elasticsearch instance on master node the other one is not becoming master automatically. It gives the master not discovered exception elasticsearch.yml on node-… --- ## [Timelion multiple queries](https://discuss.elastic.co/t/timelion-multiple-queries/189424)
**Author:** [@Anirudhan](https://discuss.elastic.co/u/Anirudhan)\ **Replies:** 1\ **Last updated:** [July 25, 2019, 10:54am UTC](https://discuss.elastic.co/t/timelion-multiple-queries/189424 "2019-07-25T10:54:49Z")
.es(index="\*\*\*\*\*\*",timefield='@updated',metric=avg:mempool\_used,q='species.keyword : "mempools" AND device\_id: 18 AND mempool\_descr.keyword : "Routing Engine"',kibana=true).lines(width=1, stack=true, fill=1).yaxis(label… --- ## [Individual Filters for each Metric](https://discuss.elastic.co/t/individual-filters-for-each-metric/175409)
**Author:** [@directproducteur](https://discuss.elastic.co/u/directproducteur)\ **Replies:** 1\ **Last updated:** [April 5, 2019, 9:10pm UTC](https://discuss.elastic.co/t/individual-filters-for-each-metric/175409 "2019-04-05T21:10:00Z")
Requirement : Objective is to include a script which can be equivalent to SQL function COUNT (CASE WHEN X == ‘1’ THEN 1 ELSE NULL), SUM (CASE WHEN Y == ‘A’ THEN 1 ELSE 0). Precisely known as Conditional Aggregation where… --- ## [Kafka input with different deserializer classes](https://discuss.elastic.co/t/kafka-input-with-different-deserializer-classes/127352)
**Author:** [@guidoilbaldo](https://discuss.elastic.co/u/guidoilbaldo)\ **Replies:** 1\ **Last updated:** [April 10, 2018, 12:57am UTC](https://discuss.elastic.co/t/kafka-input-with-different-deserializer-classes/127352 "2018-04-10T00:57:53Z")
Hi, I'm trying to consume events from Kafka with Logstash to send them to Elastic. I'm currently using a pipeline with the following input: kafka { type =\> "standard\_event" bootstrap\_servers =\> "xxx01:9092,x… --- ## [Elasticsearch可以对历史数据汇总计算吗？](https://discuss.elastic.co/t/elasticsearch/110658)
**Author:** [@longqinsi](https://discuss.elastic.co/u/longqinsi)\ **Replies:** 1\ **Last updated:** [December 15, 2017, 3:01am UTC](https://discuss.elastic.co/t/elasticsearch/110658 "2017-12-15T03:01:41Z")
我需要为公司的Web服务网关开发日志组件 功能：记录通过网关发生的所有web服务调用的日志，包括调用时间、调用人、被调用服务名称、被调用服务所属应用名称、调用是否成功、调用成功时web服务执行时长 要求：能查看过去某个时间段内全部服务、某应用所含服务、单个服务的总调用次数、成功调用次数及平均响应时长、失败调用次数。 背景：服务调用次数会很大，所以实时计算较长时间段的服务调用统计数据不可行，我们计划定期对调用日志进行汇总计算，查询时… --- ## [Unsupported platform: x86\_64-windows](https://discuss.elastic.co/t/unsupported-platform-x86-64-windows/107375)
**Author:** [@linfeng627](https://discuss.elastic.co/u/linfeng627)\ **Replies:** 1\ **Last updated:** [November 13, 2017, 11:36am UTC](https://discuss.elastic.co/t/unsupported-platform-x86-64-windows/107375 "2017-11-13T11:36:23Z")
\[image\] --- ## [Find servers whose last logged event was "error"](https://discuss.elastic.co/t/find-servers-whose-last-logged-event-was-error/64146)
**Author:** [@Ihor](https://discuss.elastic.co/u/Ihor)\ **Replies:** 7\ **Last updated:** [November 1, 2016, 10:08am UTC](https://discuss.elastic.co/t/find-servers-whose-last-logged-event-was-error/64146 "2016-11-01T10:08:12Z")
Hi everyone! Is there any way to filter top hits aggregation? For example I have the following documents in index: { name: "some\_app", status: "ERROR", created\_at: "2016-10-27" } { name: "some\_app", status: "OK", creat… --- ## [Kibana not showing indexed fields](https://discuss.elastic.co/t/kibana-not-showing-indexed-fields/33399)
**Author:** [@victorcoder](https://discuss.elastic.co/u/victorcoder)\ **Replies:** 1\ **Last updated:** [November 5, 2015, 5:53am UTC](https://discuss.elastic.co/t/kibana-not-showing-indexed-fields/33399 "2015-11-05T05:53:43Z")
I've configured an index template based on the logstash one: { "order": 3, "template": "nginx-\*", "settings": { "index.refresh\_interval": "5s" }, "mappings": { "\_default\_": { "dynamic\_templates":… --- ## [Pipeline Worker Loop Initialization Error](https://discuss.elastic.co/t/pipeline-worker-loop-initialization-error/338972)
**Author:** [@dro](https://discuss.elastic.co/u/dro)\ **Replies:** 2\ **Last updated:** [July 22, 2023, 5:15am UTC](https://discuss.elastic.co/t/pipeline-worker-loop-initialization-error/338972 "2023-07-22T05:15:29Z")
Been running into an issue with Logstash failing to initialize due to pipeline worker error. Containerized version being used: Logstash 8.8.2 Error: Using bundled JDK: /usr/share/logstash/jdk Sending Logstash logs to … --- ## [Watcher error when force executing](https://discuss.elastic.co/t/watcher-error-when-force-executing/297648)
**Author:** [@vee](https://discuss.elastic.co/u/vee)\ **Replies:** 2\ **Last updated:** [February 23, 2022, 3:46pm UTC](https://discuss.elastic.co/t/watcher-error-when-force-executing/297648 "2022-02-23T15:46:54Z")
Hi - I noticed this error when attempting to force execute a watcher that triggers out the alert to our monitoring tool - Nagios. could not parse \[webhook\] action \[inlined/notify-nagios\]. failed parsing http request te… --- ## [Logstash to convert all numeric field to float](https://discuss.elastic.co/t/logstash-to-convert-all-numeric-field-to-float/206100)
**Author:** [@jalu](https://discuss.elastic.co/u/jalu)\ **Replies:** 2\ **Last updated:** [November 1, 2019, 4:21pm UTC](https://discuss.elastic.co/t/logstash-to-convert-all-numeric-field-to-float/206100 "2019-11-01T16:21:04Z")
Hi, I recently start to work on a JSON\> logstash \> influx pipeline , I wonder if there is a way to make logstash to read every numeric value from JSON into float and write them into Influx. For now, some of the fields ar… [Previous page](https://discuss.elastic.co/top.md?page=1140&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1142&per_page=50&period=all)