# Top

**URL:** https://discuss.elastic.co/top.md?page=1146&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1147

---

## [Beats to post JSON to elasticsearch](https://discuss.elastic.co/t/beats-to-post-json-to-elasticsearch/53651)

<div class="topic-metadata">

**Author:** [@Rohit\_Shrivastava](https://discuss.elastic.co/u/Rohit_Shrivastava)\
**Replies:** 4\
**Last updated:** [June 24, 2016, 11:44am UTC](https://discuss.elastic.co/t/beats-to-post-json-to-elasticsearch/53651 "2016-06-24T11:44:18Z")

</div>

Hi I was following https://www.elastic.co/blog/structured-logging-filebeat I am using Folebeat 1.2.3. Is there any requirement of any specifc version of ElasticSearch also to make it work. I am posting to AWS Elastic…

---

## [Does there exist a Helm chart for the Elastic agent for on-prem Elasticsearch?](https://discuss.elastic.co/t/does-there-exist-a-helm-chart-for-the-elastic-agent-for-on-prem-elasticsearch/328675)

<div class="topic-metadata">

**Author:** [@catalin.bulancea](https://discuss.elastic.co/u/catalin.bulancea)\
**Replies:** 2\
**Last updated:** [March 29, 2023, 1:22pm UTC](https://discuss.elastic.co/t/does-there-exist-a-helm-chart-for-the-elastic-agent-for-on-prem-elasticsearch/328675 "2023-03-29T13:22:29Z")

</div>

Hello Elastic gurus, I guess the question is in the subject. I am trying to find a helm chart for the Elastic agent, but it's not in the below list: I found the k8s ymls for the Elastic agent here: and converted th…

---

## [Memory locking requested for elasticsearch process but memory is not locked](https://discuss.elastic.co/t/memory-locking-requested-for-elasticsearch-process-but-memory-is-not-locked/304655)

<div class="topic-metadata">

**Author:** [@amitsa](https://discuss.elastic.co/u/amitsa)\
**Replies:** 2\
**Last updated:** [May 16, 2022, 1:53am UTC](https://discuss.elastic.co/t/memory-locking-requested-for-elasticsearch-process-but-memory-is-not-locked/304655 "2022-05-16T01:53:54Z")

</div>

i am enabling bootstrap.memory\_lock: true on kubrnetes deployment of elastic multi node cluster. getting below error. Tried with this one #Set memlock limit - name: memlock-limit image: busybox im…

---

## [Elastic-agent and postfix logs](https://discuss.elastic.co/t/elastic-agent-and-postfix-logs/275872)

<div class="topic-metadata">

**Author:** [@jerrac](https://discuss.elastic.co/u/jerrac)\
**Replies:** 2\
**Last updated:** [June 16, 2021, 10:19pm UTC](https://discuss.elastic.co/t/elastic-agent-and-postfix-logs/275872 "2021-06-16T22:19:02Z")

</div>

Has anyone integrated elastic-agent and postfix in a really good way? As in made the agent split the log messages up into useful fields. I've successfully configured the Custom Logs integration to pull in my postfix log…

---

## [Import CSV File as input in logstash and pass the output data to elasticsearch](https://discuss.elastic.co/t/import-csv-file-as-input-in-logstash-and-pass-the-output-data-to-elasticsearch/74893)

<div class="topic-metadata">

**Author:** [@Uma\_Ananthu](https://discuss.elastic.co/u/Uma_Ananthu)\
**Replies:** 2\
**Last updated:** [February 13, 2017, 2:53pm UTC](https://discuss.elastic.co/t/import-csv-file-as-input-in-logstash-and-pass-the-output-data-to-elasticsearch/74893 "2017-02-13T14:53:25Z")

</div>

Hi, I am new to elastic search and I am trying to import data from csv to elasticsearch using logstash. I am using the below logstash conf file input { file { path =\> \["D:/AnalyticsTool/Exe/logstash-5.2.0/logstash-5.…

---

## [Kibana not using sub keyword field for sorting](https://discuss.elastic.co/t/kibana-not-using-sub-keyword-field-for-sorting/66983)

<div class="topic-metadata">

**Author:** [@lsilva](https://discuss.elastic.co/u/lsilva)\
**Replies:** 2\
**Last updated:** [November 24, 2016, 12:09pm UTC](https://discuss.elastic.co/t/kibana-not-using-sub-keyword-field-for-sorting/66983 "2016-11-24T12:09:10Z")

</div>

I have installed the latest docker containers for Elasticsearch, Logstash and Kibana 5 and have logback-logstash sending tomcat logs into this ELK stack. The ES mapping is automatically created and looks correct as per …

---

## [Filter Field in Metric Chart](https://discuss.elastic.co/t/filter-field-in-metric-chart/60600)

<div class="topic-metadata">

**Author:** [@techrawther](https://discuss.elastic.co/u/techrawther)\
**Replies:** 2\
**Last updated:** [September 16, 2016, 6:13am UTC](https://discuss.elastic.co/t/filter-field-in-metric-chart/60600 "2016-09-16T06:13:34Z")

</div>

I am using Kibana 4.5 I have a requirement to filter the content in Metric Chart similar to what we have filter in vertical bar chart. I am pushing my hudson jobs status to elastic and trying to get the count of each p…

---

## [Filebeat w/ Iptables Module to Logstash to Elastic: Expected Fields Not Populated](https://discuss.elastic.co/t/filebeat-w-iptables-module-to-logstash-to-elastic-expected-fields-not-populated/295720)

<div class="topic-metadata">

**Author:** [@Jarbird](https://discuss.elastic.co/u/Jarbird)\
**Replies:** 4\
**Last updated:** [February 28, 2022, 11:49am UTC](https://discuss.elastic.co/t/filebeat-w-iptables-module-to-logstash-to-elastic-expected-fields-not-populated/295720 "2022-02-28T11:49:32Z")

</div>

Hello: I'm pretty new at the ecosystem. I've learned a lot in the past few weeks however I think I've hit a roadblock where I can't seem to figure out why log lines are not being broken out into the expected fields and t…

---

## [SIEM detection rule emails body customization](https://discuss.elastic.co/t/siem-detection-rule-emails-body-customization/258416)

<div class="topic-metadata">

**Author:** [@ajesh](https://discuss.elastic.co/u/ajesh)\
**Replies:** 4\
**Last updated:** [December 28, 2020, 9:19pm UTC](https://discuss.elastic.co/t/siem-detection-rule-emails-body-customization/258416 "2020-12-28T21:19:47Z")

</div>

Hi Team, Can you please let me know how i can add additional details to detection rules message body For example , for root login attempt failure , i need the email message body with host.hostname, @timestamp, event.o…

---

## [TCP Input "Too many files open" IOException](https://discuss.elastic.co/t/tcp-input-too-many-files-open-ioexception/293499)

<div class="topic-metadata">

**Author:** [@ddth\_2022](https://discuss.elastic.co/u/ddth_2022)\
**Replies:** 5\
**Last updated:** [January 6, 2022, 4:14pm UTC](https://discuss.elastic.co/t/tcp-input-too-many-files-open-ioexception/293499 "2022-01-06T16:14:58Z")

</div>

We're running Logstash 7.16.2. We're using a TCP input that opens up too many sockets without closing them and almost every 24 hours Logstash hangs up. \[2022-01-05T05:10:59,474\]\[WARN \]\[io.netty.channel.DefaultChannelPip…

---

## [How create watcher for ML anomalies detected](https://discuss.elastic.co/t/how-create-watcher-for-ml-anomalies-detected/261639)

<div class="topic-metadata">

**Author:** [@kurdit](https://discuss.elastic.co/u/kurdit)\
**Replies:** 5\
**Last updated:** [January 21, 2021, 1:54pm UTC](https://discuss.elastic.co/t/how-create-watcher-for-ml-anomalies-detected/261639 "2021-01-21T13:54:54Z")

</div>

hi! where can I find documentation on creating and configuring watchdogs for machine learning jobs?

---

## [ElasticSearch Log Files Date Format?](https://discuss.elastic.co/t/elasticsearch-log-files-date-format/64744)

<div class="topic-metadata">

**Author:** [@elJoeyJojo](https://discuss.elastic.co/u/elJoeyJojo)\
**Replies:** 5\
**Last updated:** [November 2, 2016, 6:16pm UTC](https://discuss.elastic.co/t/elasticsearch-log-files-date-format/64744 "2016-11-02T18:16:20Z")

</div>

hello everyone, pretty dumb question but how can I change ElasticSearch's log file method from gibberish to date format day-month-year or something like that? At the moment this is what ElasticSearch is storing them a…

---

## [Marking few data points with a separate color](https://discuss.elastic.co/t/marking-few-data-points-with-a-separate-color/43466)

<div class="topic-metadata">

**Author:** [@tallharish](https://discuss.elastic.co/u/tallharish)\
**Replies:** 5\
**Last updated:** [March 11, 2016, 10:51pm UTC](https://discuss.elastic.co/t/marking-few-data-points-with-a-separate-color/43466 "2016-03-11T22:51:59Z")

</div>

Hi Everyone, I have the time-series dataset with the following mapping. I am able to visualize this easily using line chart, where x-axis is timestamp and y-axis is avg cpu\_total. now I am analyzing these data points u…

---

## [Very long gc pause caused by ES](https://discuss.elastic.co/t/very-long-gc-pause-caused-by-es/29103)

<div class="topic-metadata">

**Author:** [@makeyang](https://discuss.elastic.co/u/makeyang)\
**Replies:** 5\
**Last updated:** [September 12, 2015, 12:52am UTC](https://discuss.elastic.co/t/very-long-gc-pause-caused-by-es/29103 "2015-09-12T00:52:04Z")

</div>

\[2015-09-11 11:49:22,429\]\[WARN \]\[monitor.jvm \] \[node-173.65\] \[gc\]\[ParNew\]\[47112\]\[14482\] duration \[11.3h\], collections \[1\]/\[11.3h\], total \[11.3h\]/\[11.4h\], memory \[4.5gb\]-\>\[3.2gb\]/\[15.7gb\], all\_po…

---

## [Does the elastic agent contain winlogbeat?](https://discuss.elastic.co/t/does-the-elastic-agent-contain-winlogbeat/282043)

<div class="topic-metadata">

**Author:** [@shardinator](https://discuss.elastic.co/u/shardinator)\
**Replies:** 1\
**Last updated:** [August 20, 2021, 1:04pm UTC](https://discuss.elastic.co/t/does-the-elastic-agent-contain-winlogbeat/282043 "2021-08-20T13:04:55Z")

</div>

Hi When looking at event logs shipped from elastic agent 7.14.0 the agent.type is filebeat. So is the elastic agent actually using winlogbeat? If not, does the used filebeat have feature parity with winlogbeat? Cheers…

---

## [Pagination in Data Table visualization](https://discuss.elastic.co/t/pagination-in-data-table-visualization/188058)

<div class="topic-metadata">

**Author:** [@renjithit](https://discuss.elastic.co/u/renjithit)\
**Replies:** 1\
**Last updated:** [June 28, 2019, 2:04pm UTC](https://discuss.elastic.co/t/pagination-in-data-table-visualization/188058 "2019-06-28T14:04:52Z")

</div>

I have configured Data table visualizer with page size as 25. I can see page is loading with 25 records but cannot able to find pagination link to go to next page. Please help

---

## [Finding parts of user query that were not matched](https://discuss.elastic.co/t/finding-parts-of-user-query-that-were-not-matched/115383)

<div class="topic-metadata">

**Author:** [@svoss](https://discuss.elastic.co/u/svoss)\
**Replies:** 1\
**Last updated:** [January 19, 2018, 4:28pm UTC](https://discuss.elastic.co/t/finding-parts-of-user-query-that-were-not-matched/115383 "2018-01-19T16:28:09Z")

</div>

I am working on a project where a user is provided with Suggest as you type functionality. The suggestions are provided using a separate suggest index which is build from query history and predefined product categories. …

---

## [Kibana refresh field list not work for some index pattern](https://discuss.elastic.co/t/kibana-refresh-field-list-not-work-for-some-index-pattern/109098)

<div class="topic-metadata">

**Author:** [@gangxiong\_chen](https://discuss.elastic.co/u/gangxiong_chen)\
**Replies:** 1\
**Last updated:** [November 28, 2017, 4:03am UTC](https://discuss.elastic.co/t/kibana-refresh-field-list-not-work-for-some-index-pattern/109098 "2017-11-28T04:03:24Z")

</div>

kibana versionkibana -\> management -\> Refresh field list kibana version: 5.2.2 request like this index pattern is search-alias GET http://kibana.elog.softlayer.egomsl.com/api/kibana/search-alias/field\_capabilities re…

---

## [Error in Kibana Discover](https://discuss.elastic.co/t/error-in-kibana-discover/69642)

<div class="topic-metadata">

**Author:** [@ANU\_SARA\_VARGHESE](https://discuss.elastic.co/u/ANU_SARA_VARGHESE)\
**Replies:** 1\
**Last updated:** [December 21, 2016, 4:53pm UTC](https://discuss.elastic.co/t/error-in-kibana-discover/69642 "2016-12-21T16:53:54Z")

</div>

Hi, I have installed kibana 4.6.1 with marvel 2.4.1 and Elasticsearch 2.4.1. I am receiving an error at Discover tab. Discover: \[unsupported\_operation\_exception\] custom format isn't supported Error: \[unsupported\_op…

---

## [Logstash testing a configuration pipeline failing(Translation missing)](https://discuss.elastic.co/t/logstash-testing-a-configuration-pipeline-failing-translation-missing/49489)

<div class="topic-metadata">

**Author:** [@bhargavay5](https://discuss.elastic.co/u/bhargavay5)\
**Replies:** 1\
**Last updated:** [May 8, 2016, 7:26pm UTC](https://discuss.elastic.co/t/logstash-testing-a-configuration-pipeline-failing-translation-missing/49489 "2016-05-08T19:26:20Z")

</div>

Please see http://stackoverflow.com/questions/37101865/logstash-testing-a-configuration-pipeline-failingtranslation-missing for even images of stack trace and my config files New to logstash and following the tutorial …

---

## [Boost bool query](https://discuss.elastic.co/t/boost-bool-query/46208)

<div class="topic-metadata">

**Author:** [@BlueMagicBE](https://discuss.elastic.co/u/BlueMagicBE)\
**Replies:** 1\
**Last updated:** [April 5, 2016, 4:24am UTC](https://discuss.elastic.co/t/boost-bool-query/46208 "2016-04-05T04:24:36Z")

</div>

I would like to search a document in two fields : name + words. I want to boost the score if the word searched is in the field name. I search the word "google". As you can see, the second result has a better score tha…

---

## [Timestamp Subtraction](https://discuss.elastic.co/t/timestamp-subtraction/44282)

<div class="topic-metadata">

**Author:** [@Prateek\_Kshtriya](https://discuss.elastic.co/u/Prateek_Kshtriya)\
**Replies:** 1\
**Last updated:** [March 25, 2016, 1:02am UTC](https://discuss.elastic.co/t/timestamp-subtraction/44282 "2016-03-25T01:02:24Z")

</div>

Hi All , Please suggest me if it is possible to subtract two time stamp in kibana. The log file contains the time stamp for generation of below ID's:- Conversation ID ---\> Conversation State ID (there are different …

---

## [Stacktrace logged by several lines in kibana](https://discuss.elastic.co/t/stacktrace-logged-by-several-lines-in-kibana/337539)

<div class="topic-metadata">

**Author:** [@ANARAN](https://discuss.elastic.co/u/ANARAN)\
**Replies:** 3\
**Last updated:** [July 5, 2023, 3:59pm UTC](https://discuss.elastic.co/t/stacktrace-logged-by-several-lines-in-kibana/337539 "2023-07-05T15:59:45Z")

</div>

Hello, I'm trying to improve the display of stacktraces for an application I'm working on. Now, the stacktrace look like this : I work with log4j (I know, it's deprecated) and logstash, but not filebeat. How can I…

---

## [Elasticsearch date parsing issue with default format](https://discuss.elastic.co/t/elasticsearch-date-parsing-issue-with-default-format/216617)

<div class="topic-metadata">

**Author:** [@MrSeeker](https://discuss.elastic.co/u/MrSeeker)\
**Replies:** 3\
**Last updated:** [February 10, 2020, 6:13pm UTC](https://discuss.elastic.co/t/elasticsearch-date-parsing-issue-with-default-format/216617 "2020-02-10T18:13:15Z")

</div>

I am having a problem to parse some dates in elasticsearch. I have posted about the problem in stackoverflow. Please help me on this as i also could have some yyyy-mm-dd format dates along with epoch. Thank you,

---

## [Percentage Metric outside of Visual Builder](https://discuss.elastic.co/t/percentage-metric-outside-of-visual-builder/214484)

<div class="topic-metadata">

**Author:** [@SpinDORK](https://discuss.elastic.co/u/SpinDORK)\
**Replies:** 3\
**Last updated:** [January 13, 2020, 3:27pm UTC](https://discuss.elastic.co/t/percentage-metric-outside-of-visual-builder/214484 "2020-01-13T15:27:14Z")

</div>

Hi, Will we ever get an easy to use Percentage tool for the Metric Visualisation and not simply the Visualisation Builder as this does not accurately show data over multiple years as we can only select the most recent d…

---

## [The Pipeline is Blocked, due to node\_not\_connected\_exception with connection to Data Nodes](https://discuss.elastic.co/t/the-pipeline-is-blocked-due-to-node-not-connected-exception-with-connection-to-data-nodes/69602)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 3\
**Last updated:** [December 22, 2016, 3:26pm UTC](https://discuss.elastic.co/t/the-pipeline-is-blocked-due-to-node-not-connected-exception-with-connection-to-data-nodes/69602 "2016-12-22T15:26:42Z")

</div>

After noticing an extreme slowdown in my pipeline (from 2500 events/sec to ~600 events/sec), I started logstash with verbosity and am seeing that the events I'm expecting to index are being dropped due to a node\_not\_conn…

---

## [For ELK,sometimes Logstash says “no such index”, how to set automatic create index in ES while “no such index”?](https://discuss.elastic.co/t/for-elk-sometimes-logstash-says-no-such-index-how-to-set-automatic-create-index-in-es-while-no-such-index/62713)

<div class="topic-metadata">

**Author:** [@RJ\_W](https://discuss.elastic.co/u/RJ_W)\
**Replies:** 3\
**Last updated:** [October 12, 2016, 1:39am UTC](https://discuss.elastic.co/t/for-elk-sometimes-logstash-says-no-such-index-how-to-set-automatic-create-index-in-es-while-no-such-index/62713 "2016-10-12T01:39:32Z")

</div>

I found some pb with ELK, can anyone help me? thanks! logstash 2.4.0 elasticsearch 2.4.0 3 elasticsearch instance for cluster some time logstash warning “ "status"=\>404, "error"=\>{"type"=\>"index\_not\_found\_exception…

---

## [The ElasticSearch directory layout](https://discuss.elastic.co/t/the-elasticsearch-directory-layout/11001)

<div class="topic-metadata">

**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Replies:** 3\
**Last updated:** [March 5, 2013, 4:58pm UTC](https://discuss.elastic.co/t/the-elasticsearch-directory-layout/11001 "2013-03-05T16:58:57Z")

</div>

Can anyone provide insights on the files that ElasticSearch creates on the filesystem? Outside of the Lucene files, what are the significance of the state, global and other various files. These files constitute the loc…

---

## [Rules Authentication out of working time](https://discuss.elastic.co/t/rules-authentication-out-of-working-time/296364)

<div class="topic-metadata">

**Author:** [@frank\_rib](https://discuss.elastic.co/u/frank_rib)\
**Replies:** 0\
**Last updated:** [February 5, 2022, 7:54pm UTC](https://discuss.elastic.co/t/rules-authentication-out-of-working-time/296364 "2022-02-05T19:54:57Z")

</div>

Hello Every body, I need a rule to detect authentication based on the event id 4624 (Windows authentication) out of working time. do you have any idea about this? Thanks,

---

## [Example Java Integration tests using Groovy script fields (2.2.0)?](https://discuss.elastic.co/t/example-java-integration-tests-using-groovy-script-fields-2-2-0/43673)

<div class="topic-metadata">

**Author:** [@Olafur\_Gauti\_Gudmund](https://discuss.elastic.co/u/Olafur_Gauti_Gudmund)\
**Replies:** 0\
**Last updated:** [March 7, 2016, 3:45pm UTC](https://discuss.elastic.co/t/example-java-integration-tests-using-groovy-script-fields-2-2-0/43673 "2016-03-07T15:45:40Z")

</div>

Hi, Does anyone have a working example of an elastic junit integration test (extending org.elasticsearch.test.ESIntegTestCase) which uses a groovy script field? I am using Elastic 2.2.0 Do such tests maybe exist in t…

---

## [Filebeat trans logstash for log4j error](https://discuss.elastic.co/t/filebeat-trans-logstash-for-log4j-error/135320)

<div class="topic-metadata">

**Author:** [@flanet](https://discuss.elastic.co/u/flanet)\
**Replies:** 6\
**Last updated:** [June 13, 2018, 6:17am UTC](https://discuss.elastic.co/t/filebeat-trans-logstash-for-log4j-error/135320 "2018-06-13T06:17:49Z")

</div>

\[root@localhost logstash-6.2.4\]# ./bin/logstash -f config/log4j-es.conf Sending Logstash's logs to /usr/logstash/logstash-6.2.4/logs which is now configured via log4j2.properties \[{"message\_field"=\>{"path\_match"=\>"mes…

---

## [Does a lot of indices in elasticsearch cluster have an impact on performace of elasticsearch](https://discuss.elastic.co/t/does-a-lot-of-indices-in-elasticsearch-cluster-have-an-impact-on-performace-of-elasticsearch/58544)

<div class="topic-metadata">

**Author:** [@fatelei](https://discuss.elastic.co/u/fatelei)\
**Replies:** 6\
**Last updated:** [August 22, 2016, 3:53pm UTC](https://discuss.elastic.co/t/does-a-lot-of-indices-in-elasticsearch-cluster-have-an-impact-on-performace-of-elasticsearch/58544 "2016-08-22T15:53:10Z")

</div>

I am wondering if an elasticsearch cluster has a lot of indices (may be 100 or 1000），does the elasitcsearch cluster have performance issue ?

---

## [SIEM alert based on CVE](https://discuss.elastic.co/t/siem-alert-based-on-cve/311251)

<div class="topic-metadata">

**Author:** [@n2x4](https://discuss.elastic.co/u/n2x4)\
**Replies:** 7\
**Last updated:** [August 5, 2022, 2:23am UTC](https://discuss.elastic.co/t/siem-alert-based-on-cve/311251 "2022-08-05T02:23:57Z")

</div>

I'm currently ingesting vulnerability data into elastic, including CVE ID. I would like to generate an alert whenever a vulnerabilty is ingested that shows up on a predefined list of "priority" CVEs. I'm not quite sure …

---

## [Aggregated Index name vs Index name - define in Logstash output](https://discuss.elastic.co/t/aggregated-index-name-vs-index-name-define-in-logstash-output/107531)

<div class="topic-metadata">

**Author:** [@ssasporta](https://discuss.elastic.co/u/ssasporta)\
**Replies:** 7\
**Last updated:** [November 14, 2017, 2:06pm UTC](https://discuss.elastic.co/t/aggregated-index-name-vs-index-name-define-in-logstash-output/107531 "2017-11-14T14:06:04Z")

</div>

My Logstash conf output looks like that: output { elasticsearch { hosts =\> \["localhost:9200"\] index =\> "logstash%{\[fields\]\[index\]}%{+YYYY.MM.dd}" } stdout { codec …

---

## [ES eating all memory despite JVM startup configuration](https://discuss.elastic.co/t/es-eating-all-memory-despite-jvm-startup-configuration/20155)

<div class="topic-metadata">

**Author:** [@fred](https://discuss.elastic.co/u/fred)\
**Replies:** 7\
**Last updated:** [November 19, 2015, 2:46pm UTC](https://discuss.elastic.co/t/es-eating-all-memory-despite-jvm-startup-configuration/20155 "2015-11-19T14:46:22Z")

</div>

Hello, I'v been facing a problem on one of my ES nodes for a few days I can't explain myself. The machine was recently rebooted and I seem to have lost something. Symptoms: the amount of used memory grows until…

---

## [Elastic Search Index Name Issue](https://discuss.elastic.co/t/elastic-search-index-name-issue/174656)

<div class="topic-metadata">

**Author:** [@code\_blue](https://discuss.elastic.co/u/code_blue)\
**Replies:** 1\
**Last updated:** [March 31, 2019, 8:52am UTC](https://discuss.elastic.co/t/elastic-search-index-name-issue/174656 "2019-03-31T08:52:57Z")

</div>

We have an index in the format "app-service-log". There are no aliases defined on the index. When I try to create another index with the name "app-service-log1" it is throwing an invalid alias name exception Invalid al…

---

## [Tuning up filebeat](https://discuss.elastic.co/t/tuning-up-filebeat/159708)

<div class="topic-metadata">

**Author:** [@ErSumit](https://discuss.elastic.co/u/ErSumit)\
**Replies:** 1\
**Last updated:** [December 6, 2018, 1:52pm UTC](https://discuss.elastic.co/t/tuning-up-filebeat/159708 "2018-12-06T13:52:56Z")

</div>

Filebeat is sending logs to logstash-\> elasticsearch. Increasing number of workers shows slight increase in events rate in monitoring at kibana. Max how much I can increase number of workers. I read somewhere optimum nu…

---

## [Setup.bat file is not recognized as an internal or external command, operable program or batch file](https://discuss.elastic.co/t/setup-bat-file-is-not-recognized-as-an-internal-or-external-command-operable-program-or-batch-file/141053)

<div class="topic-metadata">

**Author:** [@Shraddha\_Srivastav](https://discuss.elastic.co/u/Shraddha_Srivastav)\
**Replies:** 1\
**Last updated:** [July 22, 2018, 10:21pm UTC](https://discuss.elastic.co/t/setup-bat-file-is-not-recognized-as-an-internal-or-external-command-operable-program-or-batch-file/141053 "2018-07-22T22:21:48Z")

</div>

Hi guys, i m trying to run my config file to pass the data to the ES. I have the error in running my config file. Please help! below is the snapshot of config file which i have saved in my bin folder. Also, i m not …

---

## [In kibana visualization data not showing](https://discuss.elastic.co/t/in-kibana-visualization-data-not-showing/112068)

<div class="topic-metadata">

**Author:** [@narasiman1986](https://discuss.elastic.co/u/narasiman1986)\
**Replies:** 1\
**Last updated:** [December 18, 2017, 10:42am UTC](https://discuss.elastic.co/t/in-kibana-visualization-data-not-showing/112068 "2017-12-18T10:42:10Z")

</div>

in kibana discover tab data is displaying, below i show the discover tab details in kibana. clinicaldata (index name) Selected Fields ? \_source Available Fields ? @timestamp ? @version t \_id t \_index add \_…

---

## [Parent Id query problem](https://discuss.elastic.co/t/parent-id-query-problem/70073)

<div class="topic-metadata">

**Author:** [@theredcat](https://discuss.elastic.co/u/theredcat)\
**Replies:** 2\
**Last updated:** [December 27, 2016, 2:58pm UTC](https://discuss.elastic.co/t/parent-id-query-problem/70073 "2016-12-27T14:58:29Z")

</div>

Hi! I have a problem with a test that i've run with Kibana and ES 5.1 If I have understood the doc correctly, those 2 requests should return the same result, but it's not the case : GET /gangs/\_search { "query"…

---

## [All servers metrics in one dashboard](https://discuss.elastic.co/t/all-servers-metrics-in-one-dashboard/51694)

<div class="topic-metadata">

**Author:** [@Vivek\_Raj](https://discuss.elastic.co/u/Vivek_Raj)\
**Replies:** 2\
**Last updated:** [June 3, 2016, 7:21pm UTC](https://discuss.elastic.co/t/all-servers-metrics-in-one-dashboard/51694 "2016-06-03T19:21:50Z")

</div>

How to add all hosts metrics in one dashboard. for example If hostnames are like this: kibana01.net kibana02.net kibana03.net If i give search query like host: "kibana0\*" its not pulling the data please help me to…

---

## [Manually Add node to cluster Elasticsearch 8.6](https://discuss.elastic.co/t/manually-add-node-to-cluster-elasticsearch-8-6/346322)

<div class="topic-metadata">

**Author:** [@syifelastic](https://discuss.elastic.co/u/syifelastic)\
**Replies:** 4\
**Last updated:** [November 3, 2023, 1:52am UTC](https://discuss.elastic.co/t/manually-add-node-to-cluster-elasticsearch-8-6/346322 "2023-11-03T01:52:51Z")

</div>

Hello. I have a 3 node Elasticsearch cluster. I originally set up the 3 nodes with an enrollment token. However, I later changed from http keystore to a certificate/key configuration in the yml. This breaks the enrollme…

---

## [Logstash is not starting in windows](https://discuss.elastic.co/t/logstash-is-not-starting-in-windows/270577)

<div class="topic-metadata">

**Author:** [@Rahul\_Ravichandran](https://discuss.elastic.co/u/Rahul_Ravichandran)\
**Replies:** 4\
**Last updated:** [April 26, 2021, 4:36am UTC](https://discuss.elastic.co/t/logstash-is-not-starting-in-windows/270577 "2021-04-26T04:36:00Z")

</div>

Hey Guys , I am using Logstash to send logs to kibana . I have configured logstash in windows instances with Two pipelines in my pipelines.yaml and this is the config that is present in pipelines.yml - pipeline.id…

---

## [Automatically elastic operator pod went down and up](https://discuss.elastic.co/t/automatically-elastic-operator-pod-went-down-and-up/258840)

<div class="topic-metadata">

**Author:** [@knagasri](https://discuss.elastic.co/u/knagasri)\
**Replies:** 4\
**Last updated:** [December 16, 2020, 3:53pm UTC](https://discuss.elastic.co/t/automatically-elastic-operator-pod-went-down-and-up/258840 "2020-12-16T15:53:36Z")

</div>

Deployed Elasticsearch cluster in GCP. Without making any changes, operator pod goes down and after sometime pods get restarted. Elastic operator version is 1.1.0 . Below is logs of elastic operator pod . {"log.level":…

---

## [Multiple index Pattern](https://discuss.elastic.co/t/multiple-index-pattern/147708)

<div class="topic-metadata">

**Author:** [@Tek\_Chand](https://discuss.elastic.co/u/Tek_Chand)\
**Replies:** 4\
**Last updated:** [September 10, 2018, 3:25am UTC](https://discuss.elastic.co/t/multiple-index-pattern/147708 "2018-09-10T03:25:31Z")

</div>

Hello Team, I am using ELK6.4.0 and filebeat6.4.0. My architecture is Filebeat-\>Logastash-\>Elasticsearch-\>Kibana. Currently i have 2 index metrcibeat-\* and filebeat-\* on kibana. In metricbeat index i am getting our app…

---

## [Shakespeare example](https://discuss.elastic.co/t/shakespeare-example/137479)

<div class="topic-metadata">

**Author:** [@Yong\_Rhee](https://discuss.elastic.co/u/Yong_Rhee)\
**Replies:** 4\
**Last updated:** [June 27, 2018, 12:22pm UTC](https://discuss.elastic.co/t/shakespeare-example/137479 "2018-06-27T12:22:48Z")

</div>

I got this log after type this on window powershell to load Shakespear example data. Do you know How can I handle this? I executed a file on a folder that I downloaded a Shakespeare.json file. (Although I have loaded da…

---

## [Implementing ES index creation and search in parallel on the same node](https://discuss.elastic.co/t/implementing-es-index-creation-and-search-in-parallel-on-the-same-node/83967)

<div class="topic-metadata">

**Author:** [@Bhargavi\_Sri](https://discuss.elastic.co/u/Bhargavi_Sri)\
**Replies:** 4\
**Last updated:** [April 28, 2017, 7:44am UTC](https://discuss.elastic.co/t/implementing-es-index-creation-and-search-in-parallel-on-the-same-node/83967 "2017-04-28T07:44:52Z")

</div>

Hi guys. I really am trying to understand Elasticsearch. The code that I have written creates 35 parallel python scripts that all try to create indices on ES cluster simultaneously. But this is happening in serial and I …

---

## [INFO - Elastic APM Mule3 Agent impact on Mule performances (latency)](https://discuss.elastic.co/t/info-elastic-apm-mule3-agent-impact-on-mule-performances-latency/303410)

<div class="topic-metadata">

**Author:** [@gchiartosini](https://discuss.elastic.co/u/gchiartosini)\
**Replies:** 6\
**Last updated:** [May 25, 2022, 11:40pm UTC](https://discuss.elastic.co/t/info-elastic-apm-mule3-agent-impact-on-mule-performances-latency/303410 "2022-05-25T23:40:37Z")

</div>

Summary: looking for help/information about impact of custom Mule APM Agent on application performance. Context: we have a 7.12.1 Elastic Stack installed "on premise" on dedicated VMs in a Google Cloud Platform envi…

---

## [PUT aliases for multiple index](https://discuss.elastic.co/t/put-aliases-for-multiple-index/350654)

<div class="topic-metadata">

**Author:** [@elk1985](https://discuss.elastic.co/u/elk1985)\
**Replies:** 3\
**Last updated:** [January 31, 2024, 2:02pm UTC](https://discuss.elastic.co/t/put-aliases-for-multiple-index/350654 "2024-01-31T14:02:53Z")

</div>

Hello. I am changing the organization of the indexes in my cluster. I have added an alias to the template and from now all indexes I need will get a correct view alias. But I have a bunch (1k of them) without view alia…

---

## [Création d'un nouvel index pour indexer des emails et leurs contenus](https://discuss.elastic.co/t/creation-dun-nouvel-index-pour-indexer-des-emails-et-leurs-contenus/285882)

<div class="topic-metadata">

**Author:** [@Yathus](https://discuss.elastic.co/u/Yathus)\
**Replies:** 8\
**Last updated:** [October 5, 2021, 12:41pm UTC](https://discuss.elastic.co/t/creation-dun-nouvel-index-pour-indexer-des-emails-et-leurs-contenus/285882 "2021-10-05T12:41:17Z")

</div>

Bonjour, Par le passé nous avons utilisé ES de maniere assez simple, nos index sont composés d'un seul type de document et un champ "content". Là je cherche à indexer des emails (Sujet, Corps, Expediteur, Date) et le c…

[Previous page](https://discuss.elastic.co/top.md?page=1145&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1147&per_page=50&period=all)
