# Top

**URL:** https://discuss.elastic.co/top.md?page=115&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 116

---

## [Add back \_primary\* search preferences](https://discuss.elastic.co/t/add-back-primary-search-preferences/176598)

<div class="topic-metadata">

**Author:** [@Andy\_Wick](https://discuss.elastic.co/u/Andy_Wick)\
**Replies:** 10\
**Last updated:** [April 12, 2019, 4:05pm UTC](https://discuss.elastic.co/t/add-back-primary-search-preferences/176598 "2019-04-12T16:05:04Z")

</div>

We run large time based clusters with 1 primary and 1 replica on each node. We liked the primary\* search options so that no extra heap or disk cache is used when searching, only the primary is loaded. With out the primar…

---

## [Log Threshold - Alert Body](https://discuss.elastic.co/t/log-threshold-alert-body/350979)

<div class="topic-metadata">

**Author:** [@erikg](https://discuss.elastic.co/u/erikg)\
**Replies:** 32\
**Last updated:** [February 27, 2024, 7:04pm UTC](https://discuss.elastic.co/t/log-threshold-alert-body/350979 "2024-02-27T19:04:19Z")

</div>

Hello, As referenced here: Action variables for a Logs threshold rule I created a log threshold rule. I would like to do is use variables/fields from the documents/logs to appear in the email body. Like how it was men…

---

## [The final mapping would have more than 1 type](https://discuss.elastic.co/t/the-final-mapping-would-have-more-than-1-type/122565)

<div class="topic-metadata">

**Author:** [@jaas](https://discuss.elastic.co/u/jaas)\
**Replies:** 9\
**Last updated:** [March 7, 2018, 12:31am UTC](https://discuss.elastic.co/t/the-final-mapping-would-have-more-than-1-type/122565 "2018-03-07T00:31:18Z")

</div>

I write a template and want to load it manually, but failed. a message showed up : {"error": {"root\_cause":\[ {"type":"illegal\_argument\_exception","reason":"Rejecting mapping update to \[OC22HHTNQxaFWq2g\_XGKyA\] as the f…

---

## [Is Elasticsearch capable of storing this amount of data?](https://discuss.elastic.co/t/is-elasticsearch-capable-of-storing-this-amount-of-data/11101)

<div class="topic-metadata">

**Author:** [@Vincent1](https://discuss.elastic.co/u/Vincent1)\
**Replies:** 9\
**Last updated:** [March 18, 2013, 2:50pm UTC](https://discuss.elastic.co/t/is-elasticsearch-capable-of-storing-this-amount-of-data/11101 "2013-03-18T14:50:03Z")

</div>

Hi there, I'm currently researching the possibilities of the usage of Elasticsearch for storing log information from a complex back-end. The plan is to track certain packages through different processes en we ther…

---

## [Deploying E+K onto K8s cluster, multiple subnets and nodegroups](https://discuss.elastic.co/t/deploying-e-k-onto-k8s-cluster-multiple-subnets-and-nodegroups/291501)

<div class="topic-metadata">

**Author:** [@George\_Leonard](https://discuss.elastic.co/u/George_Leonard)\
**Replies:** 18\
**Last updated:** [December 20, 2021, 2:39pm UTC](https://discuss.elastic.co/t/deploying-e-k-onto-k8s-cluster-multiple-subnets-and-nodegroups/291501 "2021-12-20T14:39:55Z")

</div>

this is a 2nd chance to get some assistance re: Deploying E+K onto AWD EKS cluster, multiple subnets and nodegroups across 2 az's - #2 by George\_Leonard The thread ask for assistance in deploying the Elastic+Kibana stac…

---

## [Grok does not work](https://discuss.elastic.co/t/grok-does-not-work/85995)

<div class="topic-metadata">

**Author:** [@Igor\_Gerasimow](https://discuss.elastic.co/u/Igor_Gerasimow)\
**Replies:** 10\
**Last updated:** [May 19, 2017, 1:37pm UTC](https://discuss.elastic.co/t/grok-does-not-work/85995 "2017-05-19T13:37:50Z")

</div>

Hello, i had such log row ( for example ) 10.128.0.23 - - \[16/May/2017:12:24:16 -0000\] "GET /pp/api/personalprofile/update\_status/na/Sweaty%20ASol HTTP/1.1" 101 361" - and I use such grok for parsing %{IP:clientip}…

---

## [Working with JSON array of objects via Ruby code block](https://discuss.elastic.co/t/working-with-json-array-of-objects-via-ruby-code-block/289009)

<div class="topic-metadata">

**Author:** [@Colin\_K](https://discuss.elastic.co/u/Colin_K)\
**Replies:** 10\
**Last updated:** [November 15, 2021, 9:14pm UTC](https://discuss.elastic.co/t/working-with-json-array-of-objects-via-ruby-code-block/289009 "2021-11-15T21:14:29Z")

</div>

I have a JSON array of nested objects. I wrote a filter json { source =\> \['body'\] target =\> "parsed" } ruby { code =\> "mapped = event.get('parsed').map{ |h| \[h\['k1'\], h\['k2'\],h\['k3'\],h\['k4'\]\] }; event.set(…

---

## [Elasticsearch hardware requirement,and benchmarking](https://discuss.elastic.co/t/elasticsearch-hardware-requirement-and-benchmarking/23597)

<div class="topic-metadata">

**Author:** [@haries\_fajar\_nugroho](https://discuss.elastic.co/u/haries_fajar_nugroho)\
**Replies:** 9\
**Last updated:** [May 12, 2015, 3:23am UTC](https://discuss.elastic.co/t/elasticsearch-hardware-requirement-and-benchmarking/23597 "2015-05-12T03:23:42Z")

</div>

I have created elasticsearch cluster (5 shards, 1 replica, 65536 of max\_file\_descriptors, enable mlockall,same value between es\_min\_mem and es\_max\_mem, 1 node as master node also data node, 1 node as data only node, …

---

## [Elasticsearch on AKS](https://discuss.elastic.co/t/elasticsearch-on-aks/165008)

<div class="topic-metadata">

**Author:** [@krzysztoftorunski](https://discuss.elastic.co/u/krzysztoftorunski)\
**Replies:** 10\
**Last updated:** [January 23, 2019, 2:25pm UTC](https://discuss.elastic.co/t/elasticsearch-on-aks/165008 "2019-01-23T14:25:13Z")

</div>

Hi, I'm testing Elasticsearch cluster on Azure AKS environment. I'm using 5 nodes AKS cluster (Standard E8s v3). Three nodes are dedicated for Elastic cluster. Three nodes data + master. All pods have additional persis…

---

## [Management threads blocked on TranslogWriter.syncUpTo](https://discuss.elastic.co/t/management-threads-blocked-on-translogwriter-syncupto/110036)

<div class="topic-metadata">

**Author:** [@KBuev](https://discuss.elastic.co/u/KBuev)\
**Replies:** 18\
**Last updated:** [December 14, 2017, 1:18pm UTC](https://discuss.elastic.co/t/management-threads-blocked-on-translogwriter-syncupto/110036 "2017-12-14T13:18:16Z")

</div>

Hi, everyone. I'm currently struggling with a weird issue after upgrading Elasticsearch from 5.6.4 to 6.0.0 GA. I did a rolling upgrade and I'm now seeing threads from the management pool almost constantly blocked on o…

---

## [How to monitor Elasticsearch snapshots](https://discuss.elastic.co/t/how-to-monitor-elasticsearch-snapshots/256037)

<div class="topic-metadata">

**Author:** [@mwise29](https://discuss.elastic.co/u/mwise29)\
**Replies:** 13\
**Last updated:** [November 28, 2020, 4:53am UTC](https://discuss.elastic.co/t/how-to-monitor-elasticsearch-snapshots/256037 "2020-11-28T04:53:47Z")

</div>

I'd like advice on how to monitor snapshots. Is there a way to do it via a monitor? We'd only want the status of the last snapshot taken (report either success or failed).

---

## [Filebeat Index Available, but not Logstash Index](https://discuss.elastic.co/t/filebeat-index-available-but-not-logstash-index/54474)

<div class="topic-metadata">

**Author:** [@seth.yes](https://discuss.elastic.co/u/seth.yes)\
**Replies:** 9\
**Last updated:** [July 4, 2016, 5:33am UTC](https://discuss.elastic.co/t/filebeat-index-available-but-not-logstash-index/54474 "2016-07-04T05:33:00Z")

</div>

I recently moved my Elasticsearch service to a new node, so that I now have a separate node each for Elasticsearch, Kibana & Logstash (prior E&K were on the same server). Additionally, I upgraded Kibana from 4.4.x to 4.5…

---

## [Ignore\_malformed fires mapper\_parsing\_exception for keyword type on 7.10.1 (it worked on 7.1.0)](https://discuss.elastic.co/t/ignore-malformed-fires-mapper-parsing-exception-for-keyword-type-on-7-10-1-it-worked-on-7-1-0/259142)

<div class="topic-metadata">

**Author:** [@DevFullStack](https://discuss.elastic.co/u/DevFullStack)\
**Replies:** 9\
**Last updated:** [December 22, 2020, 11:13pm UTC](https://discuss.elastic.co/t/ignore-malformed-fires-mapper-parsing-exception-for-keyword-type-on-7-10-1-it-worked-on-7-1-0/259142 "2020-12-22T23:13:04Z")

</div>

This may be a breaking change in v.7.4+ that apparently was not documented. Any thoughts on how to solve this issue with an upgrade on a logs analysis use case? The docs about the ignore\_malformed mapping parameter hav…

---

## [Logstash 6.7 plugin Elasticsearch Error "bignum too big to convert into \`long'"](https://discuss.elastic.co/t/logstash-6-7-plugin-elasticsearch-error-bignum-too-big-to-convert-into-long/175201)

<div class="topic-metadata">

**Author:** [@alfonso.viso](https://discuss.elastic.co/u/alfonso.viso)\
**Replies:** 13\
**Last updated:** [May 9, 2019, 1:23pm UTC](https://discuss.elastic.co/t/logstash-6-7-plugin-elasticsearch-error-bignum-too-big-to-convert-into-long/175201 "2019-05-09T13:23:25Z")

</div>

Hi community, Recently, we've just upgrade the version of logstash, from 6.6 to 6.7. Since then, we are receiving these message: \[ERROR\]\[logstash.outputs.elasticsearch\] An unknown error occurred sending a bulk request …

---

## [Create button does not work when trying to "Use event times to create index names"](https://discuss.elastic.co/t/create-button-does-not-work-when-trying-to-use-event-times-to-create-index-names/27781)

<div class="topic-metadata">

**Author:** [@smcgilvray](https://discuss.elastic.co/u/smcgilvray)\
**Replies:** 14\
**Last updated:** [August 21, 2015, 8:12pm UTC](https://discuss.elastic.co/t/create-button-does-not-work-when-trying-to-use-event-times-to-create-index-names/27781 "2015-08-21T20:12:20Z")

</div>

When I put the settings in the attached image and click create nothing happens. Does anyone know what this would be? Thank you, Sean McGilvray

---

## [About Voting Only Nodes](https://discuss.elastic.co/t/about-voting-only-nodes/313948)

<div class="topic-metadata">

**Author:** [@dawiro](https://discuss.elastic.co/u/dawiro)\
**Replies:** 9\
**Last updated:** [September 8, 2022, 10:47am UTC](https://discuss.elastic.co/t/about-voting-only-nodes/313948 "2022-09-08T10:47:44Z")

</div>

Hi, With voting configurations is it recommended that, when needed, a minimum of nodes are voting-only? Or is it legitimate to make all nodes voting-only? I ask because we have clusters whose topologies vary. For examp…

---

## [Elasticsearch 7.16.2 failed to start when switching from Java 8 to Java 11](https://discuss.elastic.co/t/elasticsearch-7-16-2-failed-to-start-when-switching-from-java-8-to-java-11/301404)

<div class="topic-metadata">

**Author:** [@dzyubanv](https://discuss.elastic.co/u/dzyubanv)\
**Replies:** 9\
**Last updated:** [April 22, 2022, 8:16am UTC](https://discuss.elastic.co/t/elasticsearch-7-16-2-failed-to-start-when-switching-from-java-8-to-java-11/301404 "2022-04-22T08:16:03Z")

</div>

I'm testing Elasticsearch (ES) single node cluster with Java 8 and Java 11 Java 8 and Java 11 are installed on Linux server RHEL release 7.9 in directories: /usr/java/jdk1.8.0\_281-amd64 includes subdirectories bin, inc…

---

## [APM in Kibana not showing traces](https://discuss.elastic.co/t/apm-in-kibana-not-showing-traces/327404)

<div class="topic-metadata">

**Author:** [@Nacoma](https://discuss.elastic.co/u/Nacoma)\
**Replies:** 11\
**Last updated:** [March 17, 2023, 5:20pm UTC](https://discuss.elastic.co/t/apm-in-kibana-not-showing-traces/327404 "2023-03-17T17:20:56Z")

</div>

ElasticStack version: 8.6.0 Kibana version: 8.6.0 Elasticsearch version: 8.6.0 APM Server version: 8.5.1 APM Agent language and version: PHP: 1.6.1 JS (apm-rum): 6.12.0 JS (apm-rum-core): 6.17.0 Fresh install…

---

## [Elasticsearch 7.6 is underperforming 6.8](https://discuss.elastic.co/t/elasticsearch-7-6-is-underperforming-6-8/244211)

<div class="topic-metadata">

**Author:** [@danksim](https://discuss.elastic.co/u/danksim)\
**Replies:** 17\
**Last updated:** [August 11, 2020, 7:18am UTC](https://discuss.elastic.co/t/elasticsearch-7-6-is-underperforming-6-8/244211 "2020-08-11T07:18:32Z")

</div>

Hello, I upgraded Elastic Stack from 6.8.2 to 7.6.2 (currently both clusters are running on EKS with kubernetes nodes on AWS m5.4xlarge machines 16CPUs 64GB - these are NOT SSDs) and I am experiencing degraded performan…

---

## [Writing to multiple indices using spark connector](https://discuss.elastic.co/t/writing-to-multiple-indices-using-spark-connector/137123)

<div class="topic-metadata">

**Author:** [@animageofmine](https://discuss.elastic.co/u/animageofmine)\
**Replies:** 9\
**Last updated:** [June 26, 2018, 7:59pm UTC](https://discuss.elastic.co/t/writing-to-multiple-indices-using-spark-connector/137123 "2018-06-26T19:59:09Z")

</div>

Is is possible to write to multiple indices in one bulk operation using spark connector provided by es hadoop library? According to the documentation, you can specify a document key for writing to multiple indices. My u…

---

## [Elasticsearch Change Tracking plugin](https://discuss.elastic.co/t/elasticsearch-change-tracking-plugin/6821)

<div class="topic-metadata">

**Author:** [@Thomas\_Peuss](https://discuss.elastic.co/u/Thomas_Peuss)\
**Replies:** 11\
**Last updated:** [March 5, 2012, 3:27pm UTC](https://discuss.elastic.co/t/elasticsearch-change-tracking-plugin/6821 "2012-03-05T15:27:09Z")

</div>

Hi! I have coded a small plugin for Elasticsearch that tracks changes to indices (inspired by https://github.com/elasticsearch/elasticsearch/issues/1242) and makes that information available through a REST action. …

---

## [Mapper\_parsing\_exception in filebeat logs suddenly](https://discuss.elastic.co/t/mapper-parsing-exception-in-filebeat-logs-suddenly/124277)

<div class="topic-metadata">

**Author:** [@Kamal\_Raj](https://discuss.elastic.co/u/Kamal_Raj)\
**Replies:** 12\
**Last updated:** [March 22, 2018, 1:25pm UTC](https://discuss.elastic.co/t/mapper-parsing-exception-in-filebeat-logs-suddenly/124277 "2018-03-22T13:25:34Z")

</div>

Suddenly from midnight yesterday, stopped seeing logs in Kibana, and Filebeat logs has the following. Didnot do any change. Please help 2018-03-16T14:43:56+05:30 WARN Can not index event (status=400): {"type":"mapper\_pa…

---

## [Action - Sending Email Alert through Gmail or Outlook](https://discuss.elastic.co/t/action-sending-email-alert-through-gmail-or-outlook/103533)

<div class="topic-metadata">

**Author:** [@Sanju\_Mon](https://discuss.elastic.co/u/Sanju_Mon)\
**Replies:** 11\
**Last updated:** [October 23, 2017, 11:41am UTC](https://discuss.elastic.co/t/action-sending-email-alert-through-gmail-or-outlook/103533 "2017-10-23T11:41:24Z")

</div>

Hi, In my setup, there is an Elasticsearch running which has XS logs being pumped in it through Broadworks. X-Pack is also installed. My requirement is to send and email alert in case of a specific condition. For this p…

---

## [GeoIP Pipeline and Geopoint](https://discuss.elastic.co/t/geoip-pipeline-and-geopoint/73127)

<div class="topic-metadata">

**Author:** [@Matthew\_Bullock](https://discuss.elastic.co/u/Matthew_Bullock)\
**Replies:** 9\
**Last updated:** [January 29, 2017, 9:52pm UTC](https://discuss.elastic.co/t/geoip-pipeline-and-geopoint/73127 "2017-01-29T21:52:24Z")

</div>

Hi I have a pipeline that remaps an IP address to location points using GeoIP. When I import data via the bulk API and pass it through the pipeline I can see the added fields in Kibana. The issue is Lon and Lat are se…

---

## [Engine Name is already Taken](https://discuss.elastic.co/t/engine-name-is-already-taken/306961)

<div class="topic-metadata">

**Author:** [@Rav\_Panchalingam](https://discuss.elastic.co/u/Rav_Panchalingam)\
**Replies:** 15\
**Last updated:** [July 25, 2022, 9:24am UTC](https://discuss.elastic.co/t/engine-name-is-already-taken/306961 "2022-07-25T09:24:55Z")

</div>

Our application programmatically creates search engines per environment/client. Just recently we started getting errors because the 'engine name is already taken'. Within our account such a duplicate engine name does not…

---

## [SNMP Bind Failed](https://discuss.elastic.co/t/snmp-bind-failed/151014)

<div class="topic-metadata">

**Author:** [@paul1243](https://discuss.elastic.co/u/paul1243)\
**Replies:** 11\
**Last updated:** [October 8, 2018, 8:04am UTC](https://discuss.elastic.co/t/snmp-bind-failed/151014 "2018-10-08T08:04:02Z")

</div>

When I run the SNMP input filter, I get the SNMP trap listener died; can not assign requested address . Here is my config: input { snmptrap { host =\> '\*\*.\*\*.\*\*.\*\*' port =\> 161 community =\> "public" yamlmi…

---

## [Logstash lost eventlog from winlogbeat](https://discuss.elastic.co/t/logstash-lost-eventlog-from-winlogbeat/55360)

<div class="topic-metadata">

**Author:** [@orsa](https://discuss.elastic.co/u/orsa)\
**Replies:** 9\
**Last updated:** [July 14, 2016, 3:17pm UTC](https://discuss.elastic.co/t/logstash-lost-eventlog-from-winlogbeat/55360 "2016-07-14T15:17:43Z")

</div>

Hi i dont undestend where i wrong (. on my server (Ubuntu) install ELK logstash recive syslog and netflow messages from network devices - all work all right. Install on some windows server Winlogbeat use send log to ela…

---

## [Kibana8.6.2 not loading in browser](https://discuss.elastic.co/t/kibana8-6-2-not-loading-in-browser/328557)

<div class="topic-metadata">

**Author:** [@sivamca127](https://discuss.elastic.co/u/sivamca127)\
**Replies:** 16\
**Last updated:** [April 4, 2023, 8:57pm UTC](https://discuss.elastic.co/t/kibana8-6-2-not-loading-in-browser/328557 "2023-04-04T20:57:24Z")

</div>

Hi Team, I'm Brand new to ELK stack. I'm trying to configure ELK on my RHEL7.5 system. After Good struggle i was able to configure Elasticsearch and it was up and running . FYI Now i've configured Kibana and here is…

---

## [Metric beat oracle module configuration](https://discuss.elastic.co/t/metric-beat-oracle-module-configuration/273673)

<div class="topic-metadata">

**Author:** [@mrunalini](https://discuss.elastic.co/u/mrunalini)\
**Replies:** 13\
**Last updated:** [June 2, 2021, 12:55pm UTC](https://discuss.elastic.co/t/metric-beat-oracle-module-configuration/273673 "2021-06-02T12:55:52Z")

</div>

Hi Everyone, I have configure my Orcacle.yml file in module.d folder with all required details ,also started the metricbeat. Still i am not able to see anything in my my oracle dashboard . is there any more setting i …

---

## [Match query on field with custom analyzer not working properly with operator or minimum\_should\_match](https://discuss.elastic.co/t/match-query-on-field-with-custom-analyzer-not-working-properly-with-operator-or-minimum-should-match/169393)

<div class="topic-metadata">

**Author:** [@pranav.rth](https://discuss.elastic.co/u/pranav.rth)\
**Replies:** 15\
**Last updated:** [February 27, 2019, 3:08pm UTC](https://discuss.elastic.co/t/match-query-on-field-with-custom-analyzer-not-working-properly-with-operator-or-minimum-should-match/169393 "2019-02-27T15:08:35Z")

</div>

I have created a custom pattern analyzer for one of the field. It creates 2 tokens most of the times. But when I am trying to use match query with AND operator or minimum\_should\_match as 100% , it returns records even…

---

## [Logstash : Time Field](https://discuss.elastic.co/t/logstash-time-field/114453)

<div class="topic-metadata">

**Author:** [@Rahul\_Pm](https://discuss.elastic.co/u/Rahul_Pm)\
**Replies:** 9\
**Last updated:** [January 8, 2018, 9:52am UTC](https://discuss.elastic.co/t/logstash-time-field/114453 "2018-01-08T09:52:17Z")

</div>

Hi , I'm trying to parse a CSV file on my local machine via logstash and visualize it on Kibana. But the date field ("timestamp") is being parsed as a string, and not as a date type. This is how my config looks : input…

---

## [200% CPU - Elasticsearch 5 index creation very slow with a huge synonyms list](https://discuss.elastic.co/t/200-cpu-elasticsearch-5-index-creation-very-slow-with-a-huge-synonyms-list/69052)

<div class="topic-metadata">

**Author:** [@teseo](https://discuss.elastic.co/u/teseo)\
**Replies:** 9\
**Last updated:** [December 19, 2016, 10:56am UTC](https://discuss.elastic.co/t/200-cpu-elasticsearch-5-index-creation-very-slow-with-a-huge-synonyms-list/69052 "2016-12-19T10:56:55Z")

</div>

In the middle of the work to migrate an elasticsearch index from 2.3.3 to elasticsearch 5.1.1 we have noticed that the creation of the index has risen up from less than 20 seconds to 17 minutes. This config is from devel…

---

## [Filebeat show unwanted logs](https://discuss.elastic.co/t/filebeat-show-unwanted-logs/95179)

<div class="topic-metadata">

**Author:** [@abu.sayeed](https://discuss.elastic.co/u/abu.sayeed)\
**Replies:** 10\
**Last updated:** [August 2, 2017, 7:36am UTC](https://discuss.elastic.co/t/filebeat-show-unwanted-logs/95179 "2017-08-02T07:36:10Z")

</div>

\#cat /etc/filebeat/filebeat.yml filebeat.modules: filebeat.prospectors: input\_type: log paths: /home/local/user/nsms/logs/Logs/nsms-server.log #include\_lines: \[“GP+”\] #- c:\\programdata\\elasticsearch\\logs\* outp…

---

## [Sourcemaps are not getting applied](https://discuss.elastic.co/t/sourcemaps-are-not-getting-applied/244679)

<div class="topic-metadata">

**Author:** [@Hamunaptroid](https://discuss.elastic.co/u/Hamunaptroid)\
**Replies:** 9\
**Last updated:** [August 27, 2020, 12:16pm UTC](https://discuss.elastic.co/t/sourcemaps-are-not-getting-applied/244679 "2020-08-27T12:16:31Z")

</div>

Hello, I have been having problems with RUM agent. Stack traces are not shown. In Kibana there is just "stack trace is not available". In APM server I can see this error: 2020-08-11T09:35:34.035+0200 WARN \[stacktrace\] …

---

## [Data node being overallocated](https://discuss.elastic.co/t/data-node-being-overallocated/47934)

<div class="topic-metadata">

**Author:** [@geebee](https://discuss.elastic.co/u/geebee)\
**Replies:** 10\
**Last updated:** [April 22, 2016, 1:37pm UTC](https://discuss.elastic.co/t/data-node-being-overallocated/47934 "2016-04-22T13:37:51Z")

</div>

I have 4 data only nodes in my cluster and one of them is being significantly over-allocated. ~400GB more in a ~3.5TB cluster is being stored on this node. I am not using shard allocation filtering, or any of the adva…

---

## [折れ線グラフにおいて、日付単位で集計0件の場合にcountを0で集計させたい](https://discuss.elastic.co/t/0-count-0/292079)

<div class="topic-metadata">

**Author:** [@na\_taka](https://discuss.elastic.co/u/na_taka)\
**Replies:** 13\
**Last updated:** [December 28, 2021, 7:29am UTC](https://discuss.elastic.co/t/0-count-0/292079 "2021-12-28T07:29:18Z")

</div>

お世話になっております。 折れ線グラフにおいて、質問させていただきます。 サンプルログ date dstaddr\_i レコード数 11/19 10.1.2.1 1 11/19 10.2.1.1 1 11/19 172.16.2.1 2 11/19 192.168.2.1 2 11/19 11.1.2.1 2 グラフ表示対象 11/19 173.16.2.1 2 …

---

## [Logstash Split Plugin](https://discuss.elastic.co/t/logstash-split-plugin/74322)

<div class="topic-metadata">

**Author:** [@Shrawan\_Bhagwat](https://discuss.elastic.co/u/Shrawan_Bhagwat)\
**Replies:** 13\
**Last updated:** [February 8, 2017, 12:55pm UTC](https://discuss.elastic.co/t/logstash-split-plugin/74322 "2017-02-08T12:55:39Z")

</div>

Hi All, We do have JSON data in the form { "data": \[ { "appName": "DemoApp", "appVersion": "1.1", "deviceId": "1234567", "deviceName": "moto e", "deviceOSVersion": "5.1", "packageName": "com.abc.DemoApp…

---

## [Oracle WebCenter Portal elasticsearch Issue](https://discuss.elastic.co/t/oracle-webcenter-portal-elasticsearch-issue/120788)

<div class="topic-metadata">

**Author:** [@Bassel\_Raslan](https://discuss.elastic.co/u/Bassel_Raslan)\
**Replies:** 10\
**Last updated:** [February 22, 2018, 12:46pm UTC](https://discuss.elastic.co/t/oracle-webcenter-portal-elasticsearch-issue/120788 "2018-02-22T12:46:01Z")

</div>

New version of oracle webcenter portal 12.2.1.3.0 using Elasticsearch , and it is working , but the problem is elasticsearch did not search in portal pages content (text) then generate the web link for page which include…

---

## [Currency Format](https://discuss.elastic.co/t/currency-format/257999)

<div class="topic-metadata">

**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\
**Replies:** 9\
**Last updated:** [December 8, 2020, 4:23pm UTC](https://discuss.elastic.co/t/currency-format/257999 "2020-12-08T16:23:48Z")

</div>

Hi all, My data in Elasticsearch index are numbers (integer, long, float) and amounts in euros € currency whitout affecting those are just a number. I would like to display all amounts with euro € signe. Unfortunately…

---

## [I can not login elastic](https://discuss.elastic.co/t/i-can-not-login-elastic/348450)

<div class="topic-metadata">

**Author:** [@miladmohabati](https://discuss.elastic.co/u/miladmohabati)\
**Replies:** 32\
**Last updated:** [December 25, 2023, 8:10pm UTC](https://discuss.elastic.co/t/i-can-not-login-elastic/348450 "2023-12-25T20:10:10Z")

</div>

hi my disk space is full and I can not login to elastic web how can I clear cache disk plz help me

---

## [Share Public URL Option Not Present](https://discuss.elastic.co/t/share-public-url-option-not-present/266843)

<div class="topic-metadata">

**Author:** [@wwalker](https://discuss.elastic.co/u/wwalker)\
**Replies:** 10\
**Last updated:** [March 23, 2021, 4:16pm UTC](https://discuss.elastic.co/t/share-public-url-option-not-present/266843 "2021-03-23T16:16:26Z")

</div>

I've configured anonymous access, but the Share Public URL option mentioned here does not appear. If I visit the resource I want to make available, I can access it anonymously. Elasticsearch config: security: en…

---

## [Kibana - Controls - Fuzziness/Case sensitive](https://discuss.elastic.co/t/kibana-controls-fuzziness-case-sensitive/174101)

<div class="topic-metadata">

**Author:** [@Francisca\_Lima](https://discuss.elastic.co/u/Francisca_Lima)\
**Replies:** 10\
**Last updated:** [April 1, 2019, 8:55am UTC](https://discuss.elastic.co/t/kibana-controls-fuzziness-case-sensitive/174101 "2019-04-01T08:55:23Z")

</div>

Hello, There is a way to add fuzziness/Case sensitive in my controls in Kibana? Because when I type "a" no results are presented, but if I type "A" the results appears. Any idea? Thank you, Francisca

---

## [Increasing logstash throughput for the file input and file output](https://discuss.elastic.co/t/increasing-logstash-throughput-for-the-file-input-and-file-output/38893)

<div class="topic-metadata">

**Author:** [@puneet035](https://discuss.elastic.co/u/puneet035)\
**Replies:** 11\
**Last updated:** [January 12, 2016, 5:00pm UTC](https://discuss.elastic.co/t/increasing-logstash-throughput-for-the-file-input-and-file-output/38893 "2016-01-12T17:00:47Z")

</div>

Dear all, How to increase logstash throughput for file input and file output plugins. I am using logstash on windows environment. My sample test produces 1.7GB of log file via stream writer, and I am moving these log m…

---

## [Elasticsearch EC2 setup across multiple regions](https://discuss.elastic.co/t/elasticsearch-ec2-setup-across-multiple-regions/9170)

<div class="topic-metadata">

**Author:** [@Derry\_O\_Sullivan](https://discuss.elastic.co/u/Derry_O_Sullivan)\
**Replies:** 13\
**Last updated:** [October 4, 2012, 4:08pm UTC](https://discuss.elastic.co/t/elasticsearch-ec2-setup-across-multiple-regions/9170 "2012-10-04T16:08:07Z")

</div>

Hi all, I'm trying to setup an elasticsearch cluster with 2 x ec2 small instances. One is based in the EU and the other in the US east region. I setup the 2 instances seperately with the same cluster name and ver…

---

## [KNN search speed](https://discuss.elastic.co/t/knn-search-speed/326961)

<div class="topic-metadata">

**Author:** [@dendog1](https://discuss.elastic.co/u/dendog1)\
**Replies:** 11\
**Last updated:** [March 23, 2023, 2:38pm UTC](https://discuss.elastic.co/t/knn-search-speed/326961 "2023-03-23T14:38:07Z")

</div>

Hi! Today we are using ES mainly as a key / value store where most of our reads are just get by key. We have recently started to use KNN, where we have: Around 10MM docs. 384 dim vectors. Using cosine sim as the metr…

---

## [Different Path for each Index](https://discuss.elastic.co/t/different-path-for-each-index/125926)

<div class="topic-metadata">

**Author:** [@amitmjadav](https://discuss.elastic.co/u/amitmjadav)\
**Replies:** 14\
**Last updated:** [March 29, 2018, 2:48pm UTC](https://discuss.elastic.co/t/different-path-for-each-index/125926 "2018-03-29T14:48:00Z")

</div>

Hi, Can any one help me... I want different path while creating Index... Is it possible to give path in API ???

---

## [How correct create indexes in Elasticsearch](https://discuss.elastic.co/t/how-correct-create-indexes-in-elasticsearch/76764)

<div class="topic-metadata">

**Author:** [@emilio](https://discuss.elastic.co/u/emilio)\
**Replies:** 14\
**Last updated:** [March 10, 2017, 10:31am UTC](https://discuss.elastic.co/t/how-correct-create-indexes-in-elasticsearch/76764 "2017-03-10T10:31:24Z")

</div>

Dear all, I am planning to use Elasticsearch as log storage. I have a lot of hosts from which i will ship logs through logstash to elasticsearch. So, i need info how create indexes for every host and every applicat…

---

## [Memory issue in elasticsearch](https://discuss.elastic.co/t/memory-issue-in-elasticsearch/258027)

<div class="topic-metadata">

**Author:** [@prat](https://discuss.elastic.co/u/prat)\
**Replies:** 11\
**Last updated:** [December 9, 2020, 12:50pm UTC](https://discuss.elastic.co/t/memory-issue-in-elasticsearch/258027 "2020-12-09T12:50:11Z")

</div>

Hi Team, I deployed multi-node cluster few days back and it was working fine. Today I saw elasticsearch service went down due to less memory availability. It is running fine on other two elasticsearch nodes. System ha…

---

## [ML Datafeed lookback retrieved no data](https://discuss.elastic.co/t/ml-datafeed-lookback-retrieved-no-data/124318)

<div class="topic-metadata">

**Author:** [@t.d.garland100](https://discuss.elastic.co/u/t.d.garland100)\
**Replies:** 9\
**Last updated:** [March 20, 2018, 5:34pm UTC](https://discuss.elastic.co/t/ml-datafeed-lookback-retrieved-no-data/124318 "2018-03-20T17:34:24Z")

</div>

I am following the use case for Machine Learning for Elastic Stack found at the link below: Suspicious Login Activity My setup: Ubuntu 16.04, Elastic Stack 5.6.8 (Elasticsearch, Logstash, Kibana, Filebeats X-Pack) I …

---

## [1.5.0 works from CLI, but not from Puppet elasticsearc/logstash module](https://discuss.elastic.co/t/1-5-0-works-from-cli-but-not-from-puppet-elasticsearc-logstash-module/873)

<div class="topic-metadata">

**Author:** [@Chris\_Neal](https://discuss.elastic.co/u/Chris_Neal)\
**Replies:** 11\
**Last updated:** [May 21, 2015, 9:25pm UTC](https://discuss.elastic.co/t/1-5-0-works-from-cli-but-not-from-puppet-elasticsearc-logstash-module/873 "2015-05-21T21:25:10Z")

</div>

Hi all. Super strange problem here. I upgraded my Logstash version that is managed by the Puppet Forge module elasticsearch/logstash from 1.5.0 beta 1 to 1.5.0-1. The uninstall of the beta worked fine. The install of…

[Previous page](https://discuss.elastic.co/top.md?page=114&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=116&per_page=50&period=all)
