# Top **URL:** https://discuss.elastic.co/top.md?page=1153&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1154 --- ## [How to optimise heap usage on elasticsearch nodes?](https://discuss.elastic.co/t/how-to-optimise-heap-usage-on-elasticsearch-nodes/251627)
**Author:** [@Nitish\_Goyal](https://discuss.elastic.co/u/Nitish_Goyal)\ **Replies:** 8\ **Last updated:** [October 13, 2020, 10:20am UTC](https://discuss.elastic.co/t/how-to-optimise-heap-usage-on-elasticsearch-nodes/251627 "2020-10-13T10:20:53Z")
We use elasticsearch for analytics and ingest around 3 billions events a day. For this, we create daily indices and each index has a ttl of 30 days. We flush out older indices through a cron job Cluster Size : 200 nodes … --- ## [Sum function not working on Unique Count](https://discuss.elastic.co/t/sum-function-not-working-on-unique-count/136795)
**Author:** [@CodrinChirica](https://discuss.elastic.co/u/CodrinChirica)\ **Replies:** 3\ **Last updated:** [June 22, 2018, 8:17am UTC](https://discuss.elastic.co/t/sum-function-not-working-on-unique-count/136795 "2018-06-22T08:17:59Z")
Hi, I'm trying to use the total function in a Kibana visualization and I have a table with 2 columns, one is a string and the other one is a Unique Count of some strings. The values seems correct, but when I try to appl… --- ## [java.lang.OutOfMemoryError: Java heap space when transferring data from jdbc to elasticsearch via logstash](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space-when-transferring-data-from-jdbc-to-elasticsearch-via-logstash/120067)
**Author:** [@famo](https://discuss.elastic.co/u/famo)\ **Replies:** 0\ **Last updated:** [February 15, 2018, 8:32pm UTC](https://discuss.elastic.co/t/java-lang-outofmemoryerror-java-heap-space-when-transferring-data-from-jdbc-to-elasticsearch-via-logstash/120067 "2018-02-15T20:32:58Z")
I have a huge postgres database with 20 million rows and i want to transfer it to elasticsearch via logstash . I followed the advice mentioned here and I test it for a simple database with 300 rows and all things worked … --- ## ["Unable to fetch mapping. Do you have indices matching the pattern?"](https://discuss.elastic.co/t/unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/112393)
**Author:** [@Kristoffer\_Fagerlund](https://discuss.elastic.co/u/Kristoffer_Fagerlund)\ **Replies:** 8\ **Last updated:** [December 19, 2017, 6:29pm UTC](https://discuss.elastic.co/t/unable-to-fetch-mapping-do-you-have-indices-matching-the-pattern/112393 "2017-12-19T18:29:23Z")
logstash doesnt seem to forward logs to elastic correctly slices: yellow open .kibana RixJKa2bQ8iRBwDmHd18Yw 1 1 1 0 3.2kb 3.2kb /etc/logstash/logstash.yml: path.config: /etc/logstash/conf.d ... path.logs: /var/log… --- ## [Trouble debugging Index Shard Snapshot Failed Exception](https://discuss.elastic.co/t/trouble-debugging-index-shard-snapshot-failed-exception/89117)
**Author:** [@samiam](https://discuss.elastic.co/u/samiam)\ **Replies:** 3\ **Last updated:** [June 13, 2017, 8:23pm UTC](https://discuss.elastic.co/t/trouble-debugging-index-shard-snapshot-failed-exception/89117 "2017-06-13T20:23:34Z")
Hi, I am stuck on this. Details follow. Sorry this is so long. Thanks in advance. IndexShardSnapshotFailedException\[Unable to parse Json String.\]; nested: AmazonClientException\[Unable to parse Json String.\]; n… --- ## [Logstash plugin installation](https://discuss.elastic.co/t/logstash-plugin-installation/82896)
**Author:** [@Nikparab](https://discuss.elastic.co/u/Nikparab)\ **Replies:** 3\ **Last updated:** [April 20, 2017, 12:00pm UTC](https://discuss.elastic.co/t/logstash-plugin-installation/82896 "2017-04-20T12:00:12Z")
Hi I am trying to install logstash-plugins in centos 7 by using following command /bin\>./logstash-plugin install logstash-input-mongodb But it gives error as following Could not find any executable java binary. Pl… --- ## [How to send PDF report from Kibana watcher in the email body instead as an attachment](https://discuss.elastic.co/t/how-to-send-pdf-report-from-kibana-watcher-in-the-email-body-instead-as-an-attachment/235111)
**Author:** [@Noel92](https://discuss.elastic.co/u/Noel92)\ **Replies:** 2\ **Last updated:** [June 2, 2020, 9:41am UTC](https://discuss.elastic.co/t/how-to-send-pdf-report-from-kibana-watcher-in-the-email-body-instead-as-an-attachment/235111 "2020-06-02T09:41:17Z")
Does anyone know how to post pdf reports generated in the email body instead of an attachment? Any help appreciated :slight\_smile: --- ## [ELK7.4.2版本多节点集群可以配置免费的Xpack吗](https://discuss.elastic.co/t/elk7-4-2-xpack/210469)
**Author:** [@wsy](https://discuss.elastic.co/u/wsy)\ **Replies:** 2\ **Last updated:** [December 4, 2019, 6:58am UTC](https://discuss.elastic.co/t/elk7-4-2-xpack/210469 "2019-12-04T06:58:51Z")
已有 : 我在CentOS上配置了版本号7.4.2的3个节点的elasticsearch 在节点master上配置了kibana 关闭安全验证时 服务是正常的 这两个web页面是可以正常访问的 目标 : 现在想给我的elasticsearch和kibana配置X-pack安全验证(登录web页面时设置成需要用户名密码才可访问 并且配置TLS验证) 操作 : 我按照https://www.elastic.co/guide/en/ela… --- ## [Низкая скорость индексации](https://discuss.elastic.co/t/topic/104023)
**Author:** [@IvanTushin](https://discuss.elastic.co/u/IvanTushin)\ **Replies:** 2\ **Last updated:** [November 4, 2017, 7:31pm UTC](https://discuss.elastic.co/t/topic/104023 "2017-11-04T19:31:39Z")
Здравствуйте! Помогите, пожалуйста, подкрутить настройки для ускорения индексации. Используем сервер, конфигурация: 10 ядер 128Гб оперативной SSD Документы в среднем весят 10-30Мб, посылаю запросы на пакетную вставку… --- ## [More\_like\_this使用分词器后居然查不出来](https://discuss.elastic.co/t/more-like-this/93328)
**Author:** [@401825317](https://discuss.elastic.co/u/401825317)\ **Replies:** 2\ **Last updated:** [July 26, 2017, 2:19am UTC](https://discuss.elastic.co/t/more-like-this/93328 "2017-07-26T02:19:54Z")
elasticsearch版本：5.4.0 插件：ik,pinyin jvm:1.8 setting： PUT /testcar/ { "index": { "analysis": { "analyzer": { "ik\_pinyin\_analyzer": { "type": "custom", "tokenizer": "ik\_smart", … --- ## [Trying to parse double colons with grok fails](https://discuss.elastic.co/t/trying-to-parse-double-colons-with-grok-fails/33846)
**Author:** [@daneel](https://discuss.elastic.co/u/daneel)\ **Replies:** 2\ **Last updated:** [November 5, 2015, 2:40pm UTC](https://discuss.elastic.co/t/trying-to-parse-double-colons-with-grok-fails/33846 "2015-11-05T14:40:17Z")
Hi, I'm trying to parse the following strings from a file input: ::10.10.86.13 \< auth 10.10.86.13 27/10/2015 13:57:01 \[test\] \[123456789132\] \[\] \[\] \[num|123456789456789|1234567894561234\] \> As soon as I try to parse t… --- ## [How to output data to HBase?](https://discuss.elastic.co/t/how-to-output-data-to-hbase/35213)
**Author:** [@ebuildy](https://discuss.elastic.co/u/ebuildy)\ **Replies:** 0\ **Last updated:** [November 21, 2015, 10:38am UTC](https://discuss.elastic.co/t/how-to-output-data-to-hbase/35213 "2015-11-21T10:38:38Z")
I am using LogStash 2.0, with a TCP input, some cool filters and output to elasticsearch. I also want to output to HBase, do you have any suggestion or return on experience about? Thanks you, Tom --- ## [Search thread pool active and queue not full but rejected happened](https://discuss.elastic.co/t/search-thread-pool-active-and-queue-not-full-but-rejected-happened/281494)
**Author:** [@casterQ](https://discuss.elastic.co/u/casterQ)\ **Replies:** 7\ **Last updated:** [August 16, 2021, 4:20am UTC](https://discuss.elastic.co/t/search-thread-pool-active-and-queue-not-full-but-rejected-happened/281494 "2021-08-16T04:20:12Z")
i found a datanode search thread pool has rejected，but grafana monitor show that moment search threap\_pool ’s active(size=49) and queue(size=2000) is not full，I can't understand why ，please help me。thanks a lot... --- ## [Requirements planning](https://discuss.elastic.co/t/requirements-planning/240856)
**Author:** [@parthmaniar](https://discuss.elastic.co/u/parthmaniar)\ **Replies:** 7\ **Last updated:** [July 14, 2020, 4:12am UTC](https://discuss.elastic.co/t/requirements-planning/240856 "2020-07-14T04:12:19Z")
I am running Ubuntu server 20.04 LTS in a VM hosted on a NAS (Synology.) Configuration is: Compute: Intel Celeron J3455 (4 cores allocated to the VM.) 1.5 (base) / 2.3 (burst) GHz Memory: 4 GB DDR3. Storage: 7200 RPM d… --- ## [Can't restart two-master cluster](https://discuss.elastic.co/t/cant-restart-two-master-cluster/192675)
**Author:** [@Jordan\_Ex](https://discuss.elastic.co/u/Jordan_Ex)\ **Replies:** 7\ **Last updated:** [July 30, 2019, 6:27am UTC](https://discuss.elastic.co/t/cant-restart-two-master-cluster/192675 "2019-07-30T06:27:03Z")
Hi, I need a little bit of help here. I have a two master-eligible nodes cluster (yeah, now I know) and did the following: stopped elasticsearch on both nodes moved a copy from an unimportant index to a backup delete… --- ## [I do not understand why 'kibana' does not work](https://discuss.elastic.co/t/i-do-not-understand-why-kibana-does-not-work/155110)
**Author:** [@ksb304](https://discuss.elastic.co/u/ksb304)\ **Replies:** 7\ **Last updated:** [November 2, 2018, 6:33am UTC](https://discuss.elastic.co/t/i-do-not-understand-why-kibana-does-not-work/155110 "2018-11-02T06:33:31Z")
Kibana does not work after rebooting the server. I do not understand why 'kibana' does not work. What's the problem? --- ## [Падает кластер при работе с определенными индексами](https://discuss.elastic.co/t/topic/153612)
**Author:** [@111126](https://discuss.elastic.co/u/111126)\ **Replies:** 7\ **Last updated:** [October 24, 2018, 2:38pm UTC](https://discuss.elastic.co/t/topic/153612 "2018-10-24T14:38:58Z")
Вводная: Elastic версии 6.4.2 4 дата-ноды, две hot и две warm + одна мастер нода Общий объем данных 22Тб, индексов 199, шардов 1038, документов 20млрд На hot нодах занято около 600Гб, остальное лежит на warm. Есть р… --- ## [Kibana Security Exception When Viewing Rules/Alerts](https://discuss.elastic.co/t/kibana-security-exception-when-viewing-rules-alerts/297174)
**Author:** [@DougR](https://discuss.elastic.co/u/DougR)\ **Replies:** 1\ **Last updated:** [February 21, 2022, 4:49pm UTC](https://discuss.elastic.co/t/kibana-security-exception-when-viewing-rules-alerts/297174 "2022-02-21T16:49:33Z")
I'm configuring Elastic Security with for Elastic Stack 7.16.3. When I visit Stack Management-\>Rules and Connectors in Kibana, I see the following: ...and this is the specific error that shows up when I hover over th… --- ## [Watcher alert when count is zero for a bucket](https://discuss.elastic.co/t/watcher-alert-when-count-is-zero-for-a-bucket/99368)
**Author:** [@gautamv](https://discuss.elastic.co/u/gautamv)\ **Replies:** 1\ **Last updated:** [September 8, 2017, 8:58am UTC](https://discuss.elastic.co/t/watcher-alert-when-count-is-zero-for-a-bucket/99368 "2017-09-08T08:58:56Z")
Hi, I’m trying out watcher and I am having a little trouble in understanding how it works. I’m looking to get alerted when log count for a specific log type becomes zero between the latest timestamp ingested and 5 mins… --- ## [Change Kibana Logo in Kibana5.4 version](https://discuss.elastic.co/t/change-kibana-logo-in-kibana5-4-version/90503)
**Author:** [@Leela\_Kodali](https://discuss.elastic.co/u/Leela_Kodali)\ **Replies:** 1\ **Last updated:** [June 22, 2017, 6:03pm UTC](https://discuss.elastic.co/t/change-kibana-logo-in-kibana5-4-version/90503 "2017-06-22T18:03:51Z")
Hello Experts, I need some help, i am trying to change kibana logo, i have png image i want to replace png image with Kibana logo, i tried few things but no luck kibana\\src\\ui\\views\\chrome.jade i change the code to ba… --- ## [Netscaler pattern works in test config but not live](https://discuss.elastic.co/t/netscaler-pattern-works-in-test-config-but-not-live/17638)
**Author:** [@Stefan\_Midjich](https://discuss.elastic.co/u/Stefan_Midjich)\ **Replies:** 1\ **Last updated:** [May 22, 2014, 6:48am UTC](https://discuss.elastic.co/t/netscaler-pattern-works-in-test-config-but-not-live/17638 "2014-05-22T06:48:54Z")
The following test configuration works when I paste this data to stdin: May 20 23:35:25 vm-server01 05/20/2014:21:35:25 GMT server01 0-PPE-0 : TCP CONN\_TERMINATE 809689 0 : Source 127.0.0.1:7776 - Destination 127.0.… --- ## [Syslog load balancing in front of Logstash?](https://discuss.elastic.co/t/syslog-load-balancing-in-front-of-logstash/359407)
**Author:** [@Craig\_Sharp](https://discuss.elastic.co/u/Craig_Sharp)\ **Replies:** 4\ **Last updated:** [May 14, 2024, 5:53pm UTC](https://discuss.elastic.co/t/syslog-load-balancing-in-front-of-logstash/359407 "2024-05-14T17:53:59Z")
I have a lot of syslogs flowing from multiple sources into four logstash nodes and then to Elastic. At this time I am just using DNS round robin to balance the Logstash nodes for the inbound syslog traffic. I want to us… --- ## [Multiply option changes yaxis scale(units)](https://discuss.elastic.co/t/multiply-option-changes-yaxis-scale-units/126969)
**Author:** [@nikhilkvn](https://discuss.elastic.co/u/nikhilkvn)\ **Replies:** 4\ **Last updated:** [April 18, 2018, 7:02am UTC](https://discuss.elastic.co/t/multiply-option-changes-yaxis-scale-units/126969 "2018-04-18T07:02:26Z")
Hi, I am trying to make two different Rx/Tx for data transmission over and below X-axis followed the tutorial on Timelion page. Problem: Y-axis units doesn't hold universal.\[no\_scale\] //.es(index=rfdata\*, timefield=t… --- ## [Plot signal strength timeseries](https://discuss.elastic.co/t/plot-signal-strength-timeseries/121185)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 4\ **Last updated:** [February 27, 2018, 11:47pm UTC](https://discuss.elastic.co/t/plot-signal-strength-timeseries/121185 "2018-02-27T23:47:17Z")
Hi all, I have logs containing signal strength that I want to plot. Only changes in signal strength are logged. I would like to make a graph in timelion (or a normal line graph) that takes each value as is and plots th… --- ## [Packetbeat debugging - no file output](https://discuss.elastic.co/t/packetbeat-debugging-no-file-output/87496)
**Author:** [@tiburblium](https://discuss.elastic.co/u/tiburblium)\ **Replies:** 4\ **Last updated:** [May 31, 2017, 8:26am UTC](https://discuss.elastic.co/t/packetbeat-debugging-no-file-output/87496 "2017-05-31T08:26:54Z")
I am trying to debug my standalone installation of packetbeat, which I've configured to output to a file. I am not getting any file output and I'm not clear on how to get more information on what the problem would be. Ap… --- ## [High heap usage](https://discuss.elastic.co/t/high-heap-usage/167530)
**Author:** [@Ivy\_Vo](https://discuss.elastic.co/u/Ivy_Vo)\ **Replies:** 5\ **Last updated:** [February 8, 2019, 7:23pm UTC](https://discuss.elastic.co/t/high-heap-usage/167530 "2019-02-08T19:23:13Z")
Hi, I'm a beginner in ELK topic and really need help! I have a cluster with 6 nodes (3 master, 1 client and 2 data nodes). The heap configuration of each node is as below: master: heap 2g (half of physical RAM as recom… --- ## [Script aggreation shows significant performance issue then none-script aggreation](https://discuss.elastic.co/t/script-aggreation-shows-significant-performance-issue-then-none-script-aggreation/54000)
**Author:** [@Jin\_Guo](https://discuss.elastic.co/u/Jin_Guo)\ **Replies:** 5\ **Last updated:** [June 28, 2016, 12:42pm UTC](https://discuss.elastic.co/t/script-aggreation-shows-significant-performance-issue-then-none-script-aggreation/54000 "2016-06-28T12:42:53Z")
Hi All, I currently meet siginificant performance issue when using script aggreation. Here is my test script which using to do some mapping work: GET \_search { "size": 0, "aggs": { "id\_host\_status": { … --- ## [Beats repo and Spacewalk](https://discuss.elastic.co/t/beats-repo-and-spacewalk/36043)
**Author:** [@mikula](https://discuss.elastic.co/u/mikula)\ **Replies:** 5\ **Last updated:** [December 1, 2015, 1:39pm UTC](https://discuss.elastic.co/t/beats-repo-and-spacewalk/36043 "2015-12-01T13:39:37Z")
I have one funny problem with beats rpm repo: All beta and rc builds (those with tilde in in name) are in spacewalk considered as "newer" than official build so all systems connected to this repo have "updatable" status … --- ## [How to add new config file to logstash which is created by docker compose?](https://discuss.elastic.co/t/how-to-add-new-config-file-to-logstash-which-is-created-by-docker-compose/351655)
**Author:** [@shrm](https://discuss.elastic.co/u/shrm)\ **Replies:** 3\ **Last updated:** [January 29, 2024, 1:43pm UTC](https://discuss.elastic.co/t/how-to-add-new-config-file-to-logstash-which-is-created-by-docker-compose/351655 "2024-01-29T13:43:48Z")
How to add a new config file to logstash which is created by docker-compose? I created my service with docker-compose and log stash is connected to kibana and elasticsearch. Now I created a new config file for logstash… --- ## [Elastic docs in PDF](https://discuss.elastic.co/t/elastic-docs-in-pdf/348305)
**Author:** [@lduvnjak](https://discuss.elastic.co/u/lduvnjak)\ **Replies:** 3\ **Last updated:** [November 30, 2023, 11:58am UTC](https://discuss.elastic.co/t/elastic-docs-in-pdf/348305 "2023-11-30T11:58:32Z")
This is a very simple question but I just wanna make sure. Does Elasticsearch have it's documentation in PDF format available for download anywhere? Thanks for any help in advance! Cheers, Luka --- ## [Elasticsearch Querying a document to grab field using another documents field value](https://discuss.elastic.co/t/elasticsearch-querying-a-document-to-grab-field-using-another-documents-field-value/330411)
**Author:** [@dro](https://discuss.elastic.co/u/dro)\ **Replies:** 3\ **Last updated:** [April 25, 2023, 10:32pm UTC](https://discuss.elastic.co/t/elasticsearch-querying-a-document-to-grab-field-using-another-documents-field-value/330411 "2023-04-25T22:32:25Z")
Hello all, I'm unable to find documentation on the following which I believe might be a niche implementation, but will try to explain the best I can. My inexperience aside, at first glance this seems to probably relate … --- ## [Failed to connect to backoff(elasticsearch(https://\)): Connection marked as failed because the onConnect callback failed: open /usr/share/apm-server/bin/ingest/pipeline/definition.json: no such file or directory](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-https-es-connection-marked-as-failed-because-the-onconnect-callback-failed-open-usr-share-apm-server-bin-ingest-pipeline-definition-json-no-such-file-or-directory/315700)
**Author:** [@preetish\_P](https://discuss.elastic.co/u/preetish_P)\ **Replies:** 3\ **Last updated:** [October 13, 2022, 2:49am UTC](https://discuss.elastic.co/t/failed-to-connect-to-backoff-elasticsearch-https-es-connection-marked-as-failed-because-the-onconnect-callback-failed-open-usr-share-apm-server-bin-ingest-pipeline-definition-json-no-such-file-or-directory/315700 "2022-10-13T02:49:06Z")
Hello, We are running ELK stack v7.11.2 in 3 node cluster (RHEL7) and trying to implement APM server with Node JS agent. APM server is installed in 2 nodes out of the 3 and each will point to all 3 ES nodes. Below is … --- ## [Index pattern search returns empty results](https://discuss.elastic.co/t/index-pattern-search-returns-empty-results/233407)
**Author:** [@gustavosoares](https://discuss.elastic.co/u/gustavosoares)\ **Replies:** 3\ **Last updated:** [May 25, 2020, 11:13pm UTC](https://discuss.elastic.co/t/index-pattern-search-returns-empty-results/233407 "2020-05-25T23:13:49Z")
Hi All, I'm using kibana 7.5.0. I've recently created a new time based index pattern and the discover view is not returning any results. However, when I search directly on the index using the console, it does return re… --- ## [Kibana 6.7 service trying to create new index after each newstart, but timing out each time](https://discuss.elastic.co/t/kibana-6-7-service-trying-to-create-new-index-after-each-newstart-but-timing-out-each-time/181595)
**Author:** [@EldrosKandar](https://discuss.elastic.co/u/EldrosKandar)\ **Replies:** 3\ **Last updated:** [May 20, 2019, 3:01pm UTC](https://discuss.elastic.co/t/kibana-6-7-service-trying-to-create-new-index-after-each-newstart-but-timing-out-each-time/181595 "2019-05-20T15:01:20Z")
I'm on 6.7 and this issue seems to follow me since I made the update. After each newstart of the kibana service, it tries to migrate the .kibana index from .index\_ to .index\_\. This is odd, and it would have not bee… --- ## [Bucketizing values in a heatmap](https://discuss.elastic.co/t/bucketizing-values-in-a-heatmap/168108)
**Author:** [@d.neri](https://discuss.elastic.co/u/d.neri)\ **Replies:** 3\ **Last updated:** [February 20, 2019, 7:32pm UTC](https://discuss.elastic.co/t/bucketizing-values-in-a-heatmap/168108 "2019-02-20T19:32:02Z")
I am trying to create a heatmap with a custom sort for x-axis values. In this example, the x-axis values are weather conditions and have similar names. For instance, I want to show "Partly Cloudy," "Cloudy," and "Mostl… --- ## [Logstash sincedb\_path is not working](https://discuss.elastic.co/t/logstash-sincedb-path-is-not-working/118918)
**Author:** [@databeata](https://discuss.elastic.co/u/databeata)\ **Replies:** 3\ **Last updated:** [February 7, 2018, 9:14pm UTC](https://discuss.elastic.co/t/logstash-sincedb-path-is-not-working/118918 "2018-02-07T21:14:59Z")
This is not working. There is no output. I want to use sincedb\_path =\> "/mnt/elk/logstash/scripts/sincedb/from\_nifi\_dev\_logs\_nifi\_6 sudo rm -rf /mnt/elk/logstash/scripts/sincedb/from\_nifi\_dev\_logs\_nifi\_6 sudo /usr/shar… --- ## [Logs from linux machine is unreadable](https://discuss.elastic.co/t/logs-from-linux-machine-is-unreadable/56722)
**Author:** [@babeesh](https://discuss.elastic.co/u/babeesh)\ **Replies:** 3\ **Last updated:** [July 29, 2016, 12:01pm UTC](https://discuss.elastic.co/t/logs-from-linux-machine-is-unreadable/56722 "2016-07-29T12:01:38Z")
I have logserver running on ubuntu 14.04. ELK versions are 2 or above(kibana 4.4.x). I am also using nagios to monitor systems and applications. Now I need to sent error messages from nagios to logserver. Nagios is in… --- ## [Multiple language support : Object level analyzer mapping](https://discuss.elastic.co/t/multiple-language-support-object-level-analyzer-mapping/43028)
**Author:** [@Shiv\_Naidu](https://discuss.elastic.co/u/Shiv_Naidu)\ **Replies:** 3\ **Last updated:** [March 1, 2016, 10:32am UTC](https://discuss.elastic.co/t/multiple-language-support-object-level-analyzer-mapping/43028 "2016-03-01T10:32:14Z")
Currently based on the FAQs and Elastic document portal there are only 2 ways to configure different language, Configure at the document level Configure at the field level The above configuration styles are too li… --- ## [My Indices are getting deleted automatically](https://discuss.elastic.co/t/my-indices-are-getting-deleted-automatically/285805)
**Author:** [@nnice](https://discuss.elastic.co/u/nnice)\ **Replies:** 2\ **Last updated:** [October 4, 2021, 11:58am UTC](https://discuss.elastic.co/t/my-indices-are-getting-deleted-automatically/285805 "2021-10-04T11:58:28Z")
Dear Community, I'm new to ELK. Need you assistance why my indices are getting deleted. if you could let me know what is the issue. I'll be highly obliged for that. Thank you soooo muchhhhh # ======================== E… --- ## [What is the best practice to convert my custom logs to ECS(Or not)](https://discuss.elastic.co/t/what-is-the-best-practice-to-convert-my-custom-logs-to-ecs-or-not/200576)
**Author:** [@Aviad\_Hadida](https://discuss.elastic.co/u/Aviad_Hadida)\ **Replies:** 2\ **Last updated:** [October 3, 2019, 8:16am UTC](https://discuss.elastic.co/t/what-is-the-best-practice-to-convert-my-custom-logs-to-ecs-or-not/200576 "2019-10-03T08:16:05Z")
Hi. I am newbie on the ELK and i have done simple intergation with the cloud product(Very easy to use) The problem started when i try to ship the logs with the new ECS(Elastic common schema) and i was lost.. I have cu… --- ## [Unknown filed type is not mapped](https://discuss.elastic.co/t/unknown-filed-type-is-not-mapped/85667)
**Author:** [@avivc](https://discuss.elastic.co/u/avivc)\ **Replies:** 2\ **Last updated:** [May 15, 2017, 6:15am UTC](https://discuss.elastic.co/t/unknown-filed-type-is-not-mapped/85667 "2017-05-15T06:15:03Z")
Hi, I have a filed with type Unknown. When investigating my index pattern and on the Dev Tool, I can't see that field, but can see it in my query/ searches results The problem is that when I wish to display this field … --- ## [Metric Beat and Jolokia Module](https://discuss.elastic.co/t/metric-beat-and-jolokia-module/85232)
**Author:** [@Bhavani\_Ananth](https://discuss.elastic.co/u/Bhavani_Ananth)\ **Replies:** 2\ **Last updated:** [May 15, 2017, 5:31am UTC](https://discuss.elastic.co/t/metric-beat-and-jolokia-module/85232 "2017-05-15T05:31:30Z")
Hi There, I was trying out the new Jolokia module in Metric beat 5.4. The configuration is given at the end. The values are coming for the attributes that don't have space. For others say related to MemoryPool (PS Ede… --- ## [Specify a TTL for connection from Filebeat to Logstash](https://discuss.elastic.co/t/specify-a-ttl-for-connection-from-filebeat-to-logstash/38538)
**Author:** [@Jeremy\_White](https://discuss.elastic.co/u/Jeremy_White)\ **Replies:** 2\ **Last updated:** [January 7, 2016, 9:31am UTC](https://discuss.elastic.co/t/specify-a-ttl-for-connection-from-filebeat-to-logstash/38538 "2016-01-07T09:31:30Z")
I am using Filebeat to forward logs to a Logstash load balancer (Amazon ELB) and would like to specify a time to live (TTL) for the connection to Logstash. The ELB works great, except when I apply changes to the instan… --- ## [Issues when running groovy script for "function\_score"?](https://discuss.elastic.co/t/issues-when-running-groovy-script-for-function-score/21867)
**Author:** [@Panzer](https://discuss.elastic.co/u/Panzer)\ **Replies:** 2\ **Last updated:** [September 20, 2015, 10:33am UTC](https://discuss.elastic.co/t/issues-when-running-groovy-script-for-function-score/21867 "2015-09-20T10:33:16Z")
def score = 0; // terms: list of tokens for(term in terms) { q\_term\_freq = terms​.countBy { it }​\[term\]; term\_freq = \_index\[field\]\[term\].tf(); doc\_freq = \_index\[field\]\[term\].df(); score += term\_freq \* doc\_freq \* … --- ## [Visualization of sparse data in TSVB](https://discuss.elastic.co/t/visualization-of-sparse-data-in-tsvb/247113)
**Author:** [@Chenlrv](https://discuss.elastic.co/u/Chenlrv)\ **Replies:** 6\ **Last updated:** [September 14, 2020, 2:49pm UTC](https://discuss.elastic.co/t/visualization-of-sparse-data-in-tsvb/247113 "2020-09-14T14:49:42Z")
Hello, I use TSVB to visualize data that is being sent every 1 minute to Elasticsearch. The problem is, sometimes the data takes a little bit more time to be calculated, and so it is being sent after 1 min and 5 second… --- ## [Monitoring cluster bring down production](https://discuss.elastic.co/t/monitoring-cluster-bring-down-production/123282)
**Author:** [@alepuccetti](https://discuss.elastic.co/u/alepuccetti)\ **Replies:** 6\ **Last updated:** [March 13, 2018, 8:53am UTC](https://discuss.elastic.co/t/monitoring-cluster-bring-down-production/123282 "2018-03-13T08:53:08Z")
I have a separate monitoring cluster separate to the production one. However, when the monitoring cluster does not respond (e.g. maintenance, network problem, internal error) the production cluster goes RED and stop work… --- ## [\[security\_exception\] action \[indices:admin/mappings/get\] is unauthorized for user \[kibana\]](https://discuss.elastic.co/t/security-exception-action-indices-admin-mappings-get-is-unauthorized-for-user-kibana/141310)
**Author:** [@Sjaak01](https://discuss.elastic.co/u/Sjaak01)\ **Replies:** 1\ **Last updated:** [July 24, 2018, 7:12am UTC](https://discuss.elastic.co/t/security-exception-action-indices-admin-mappings-get-is-unauthorized-for-user-kibana/141310 "2018-07-24T07:12:31Z")
Hi, As I test I installed Kibana on a different server running on port 5602 with the default index changed from .kibana to .defaultindex2. I can log in but after that Kibana shows \[security\_exception\] action \[indices:… --- ## [Multiple Dependent Signals Function Score Query](https://discuss.elastic.co/t/multiple-dependent-signals-function-score-query/152076)
**Author:** [@Sandeep42](https://discuss.elastic.co/u/Sandeep42)\ **Replies:** 0\ **Last updated:** [October 11, 2018, 2:48pm UTC](https://discuss.elastic.co/t/multiple-dependent-signals-function-score-query/152076 "2018-10-11T14:48:23Z")
Hi, I would like to do a non-trivial function\_score query for the domain in which I am working on. Let me try to explain you what I'm trying to achieve. Let's say you have an inventory of Apples. Each day, you get a ne… --- ## [Grok parsing timestamp with 2 fields](https://discuss.elastic.co/t/grok-parsing-timestamp-with-2-fields/286312)
**Author:** [@alon\_carmelly](https://discuss.elastic.co/u/alon_carmelly)\ **Replies:** 8\ **Last updated:** [October 20, 2021, 8:36am UTC](https://discuss.elastic.co/t/grok-parsing-timestamp-with-2-fields/286312 "2021-10-20T08:36:11Z")
Hi, I got this log which has 2 fields of time stamp. How would I go about parsing it, couldn't find any examples online ! {"type": "GreatLog", \*\*"date": "10/3/2021", "time": "6:21:35 AM"\*\*, "message": "Take a Measureme… --- ## [java.net.SocketTimeoutException: 30,000 milliseconds timeout on connection http-outgoing-12](https://discuss.elastic.co/t/java-net-sockettimeoutexception-30-000-milliseconds-timeout-on-connection-http-outgoing-12/264657)
**Author:** [@vands](https://discuss.elastic.co/u/vands)\ **Replies:** 0\ **Last updated:** [February 18, 2021, 7:58am UTC](https://discuss.elastic.co/t/java-net-sockettimeoutexception-30-000-milliseconds-timeout-on-connection-http-outgoing-12/264657 "2021-02-18T07:58:17Z")
Hi All, Facing the below issue while fetching bulk records using high level rest client builder . java.net.SocketTimeoutException: 30,000 milliseconds timeout on connection http-outgoing-12 . Do I need to change any c… [Previous page](https://discuss.elastic.co/top.md?page=1152&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1154&per_page=50&period=all)