# Top **URL:** https://discuss.elastic.co/top.md?page=1172&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1173 --- ## [Aggregation on non-indexed fields](https://discuss.elastic.co/t/aggregation-on-non-indexed-fields/125912)
**Author:** [@Sundar\_V](https://discuss.elastic.co/u/Sundar_V)\ **Replies:** 1\ **Last updated:** [March 28, 2018, 12:46pm UTC](https://discuss.elastic.co/t/aggregation-on-non-indexed-fields/125912 "2018-03-28T12:46:45Z")
Hello, We are having in one ES 5.4, with 3 nodes and in total 80 shard. We have 800 million documents in these shards. When we are aggregating on certain fields, we see that it is very slow. The fields we are aggregat… --- ## [Elasticsearch cluster IP whitelist](https://discuss.elastic.co/t/elasticsearch-cluster-ip-whitelist/78877)
**Author:** [@amano](https://discuss.elastic.co/u/amano)\ **Replies:** 1\ **Last updated:** [March 16, 2017, 2:37pm UTC](https://discuss.elastic.co/t/elasticsearch-cluster-ip-whitelist/78877 "2017-03-16T14:37:31Z")
Hello, we have an elasticsearch cluster composed of 1 coordinator node and 3 data nodes. We need to block external access to the cluster. We want: - the coordinator node to be accessible only by one specific machine … --- ## [Sum aggregation in scripting (Kibana Visualization)](https://discuss.elastic.co/t/sum-aggregation-in-scripting-kibana-visualization/58325)
**Author:** [@sheeba](https://discuss.elastic.co/u/sheeba)\ **Replies:** 1\ **Last updated:** [August 18, 2016, 11:14pm UTC](https://discuss.elastic.co/t/sum-aggregation-in-scripting-kibana-visualization/58325 "2016-08-18T23:14:39Z")
In data table visualization, We have created a new metric with the script as { "script" : "doc\['field'\].value \* 2 " } Whether the total of this new metric can be found in Kibana using sum aggregation in JSON Input scr… --- ## [Vm.max\_map\_count in Dockerfile](https://discuss.elastic.co/t/vm-max-map-count-in-dockerfile/94405)
**Author:** [@rachelkelly](https://discuss.elastic.co/u/rachelkelly)\ **Replies:** 0\ **Last updated:** [July 24, 2017, 11:44pm UTC](https://discuss.elastic.co/t/vm-max-map-count-in-dockerfile/94405 "2017-07-24T23:44:46Z")
Hello all, we are running Elasticsearch in a Docker container on an AWS EC2 instance in an ECS cluster using a Cloudformation template. AWS jargon aside, I can't find an automated way to add vm.max\_map\_count to the Clou… --- ## [Elastic Endpoint Security crashes and memory errors](https://discuss.elastic.co/t/elastic-endpoint-security-crashes-and-memory-errors/282003)
**Author:** [@nemhods](https://discuss.elastic.co/u/nemhods)\ **Replies:** 6\ **Last updated:** [August 19, 2021, 9:49pm UTC](https://discuss.elastic.co/t/elastic-endpoint-security-crashes-and-memory-errors/282003 "2021-08-19T21:49:53Z")
Hey, I'm getting multiple different Elastic Endpoint crashes across different hosts and across Elastic Agent 7.14 and 7.13.2. I provide exemplary crashes below, from the Windows Application Event log. In terms of crash… --- ## [Invalid date because milliseconds does not contains trailing zeros](https://discuss.elastic.co/t/invalid-date-because-milliseconds-does-not-contains-trailing-zeros/189874)
**Author:** [@Thiago\_Coimbra\_Lemos](https://discuss.elastic.co/u/Thiago_Coimbra_Lemos)\ **Replies:** 6\ **Last updated:** [July 15, 2019, 4:03pm UTC](https://discuss.elastic.co/t/invalid-date-because-milliseconds-does-not-contains-trailing-zeros/189874 "2019-07-15T16:03:24Z")
TL;DR; Valid: 2019-07-10T17:01:01.500Z Valid: 2019-07-10T17:01:01.50Z INVALID: 2019-07-10T17:01:01.5Z I want to know how to accept the invalid value as a valid value, since it is a valid date value. I'm trying to … --- ## [Help with Elasticsearch Cluster](https://discuss.elastic.co/t/help-with-elasticsearch-cluster/132885)
**Author:** [@jast](https://discuss.elastic.co/u/jast)\ **Replies:** 6\ **Last updated:** [May 25, 2018, 1:15pm UTC](https://discuss.elastic.co/t/help-with-elasticsearch-cluster/132885 "2018-05-25T13:15:47Z")
I'm trying to create a master cluster to connect to a dedicated coordinate node with dockers, In the two master nodes("nodeMaster1", "nodeMaster2"\]) I have the following: cluster.name: "docker-cluster" network.host: 0… --- ## [ES logs and cluster health](https://discuss.elastic.co/t/es-logs-and-cluster-health/22140)
**Author:** [@caspertz](https://discuss.elastic.co/u/caspertz)\ **Replies:** 6\ **Last updated:** [February 17, 2015, 12:35pm UTC](https://discuss.elastic.co/t/es-logs-and-cluster-health/22140 "2015-02-17T12:35:56Z")
We have a 4 node ES cluster running version 1.4.1. We are using Ubuntu and have it set up as a service. We have defined our location for logs as a specific directory other than /var/log/elasticsearch which is the … --- ## [Logstash transaction processing](https://discuss.elastic.co/t/logstash-transaction-processing/117047)
**Author:** [@Monica1](https://discuss.elastic.co/u/Monica1)\ **Replies:** 4\ **Last updated:** [January 29, 2018, 2:59pm UTC](https://discuss.elastic.co/t/logstash-transaction-processing/117047 "2018-01-29T14:59:52Z")
Hi, I am looking for transaction specific processing in logstash. For example., I am having Linux server having one user account 'aaa' having admin access. Incase if 'aaa' is trying to login to one Linux server with mu… --- ## [Create new analyzer for Existing index in AWS(Amazon) machine](https://discuss.elastic.co/t/create-new-analyzer-for-existing-index-in-aws-amazon-machine/94456)
**Author:** [@Vinothkumar](https://discuss.elastic.co/u/Vinothkumar)\ **Replies:** 4\ **Last updated:** [July 31, 2017, 12:42pm UTC](https://discuss.elastic.co/t/create-new-analyzer-for-existing-index-in-aws-amazon-machine/94456 "2017-07-31T12:42:32Z")
Hi Everyone, How can I Create new analyzer for Existing index in AWS(Amazon) machine? All the documents which I refered so far its asking to close then update then open the index but AWS(Amazon) does not support Close an… --- ## [Integrate formated date to elasticsearch](https://discuss.elastic.co/t/integrate-formated-date-to-elasticsearch/87862)
**Author:** [@Sylfaen](https://discuss.elastic.co/u/Sylfaen)\ **Replies:** 1\ **Last updated:** [June 2, 2017, 8:41am UTC](https://discuss.elastic.co/t/integrate-formated-date-to-elasticsearch/87862 "2017-06-02T08:41:46Z")
Hey I'm trying to integrate date format like "Fri Jan 02 17:34:45 CET 2017" but logstash send me error message with malformated date at "CET 2017" I used the response from here but "exDate": { "type": "date", "form… --- ## [Logstash Field Types Not Working Intermittently](https://discuss.elastic.co/t/logstash-field-types-not-working-intermittently/56490)
**Author:** [@JellyPanda](https://discuss.elastic.co/u/JellyPanda)\ **Replies:** 4\ **Last updated:** [July 30, 2016, 12:09pm UTC](https://discuss.elastic.co/t/logstash-field-types-not-working-intermittently/56490 "2016-07-30T12:09:11Z")
Hi Guys, I have seen this type of issue once or twice before but i can't seem to get it sorted my side still. I have a field defined as an INT in my patterns, which today has thrown out the error (in Kibana): Visualiz… --- ## [Can not get any logs after create a datastream](https://discuss.elastic.co/t/can-not-get-any-logs-after-create-a-datastream/291629)
**Author:** [@bilgicsin](https://discuss.elastic.co/u/bilgicsin)\ **Replies:** 2\ **Last updated:** [December 14, 2021, 8:48am UTC](https://discuss.elastic.co/t/can-not-get-any-logs-after-create-a-datastream/291629 "2021-12-14T08:48:11Z")
Hi Everyone! I am trying to change my data to the datastream. Normally I can get logs, I can see indice first. After I create a datastream I could not get any logs even though logs keep coming. I followed this steps: … --- ## [CSV Export wrong @timestamp](https://discuss.elastic.co/t/csv-export-wrong-timestamp/248259)
**Author:** [@kvtang](https://discuss.elastic.co/u/kvtang)\ **Replies:** 2\ **Last updated:** [September 17, 2020, 12:35am UTC](https://discuss.elastic.co/t/csv-export-wrong-timestamp/248259 "2020-09-17T00:35:07Z")
Hi all, I have a date filter in logstash as below : date { match =\> \["\[@metadata\]\[timestamp\]", "ISO8601"\] timezone =\> "Asia/Kuala\_Lumpur" } However, when I try to export into CSV, the @timestamp field is always … --- ## [Pipeline.orderedがデフォルトの場合にエラーが発生](https://discuss.elastic.co/t/pipeline-ordered/240480)
**Author:** [@t-nakata](https://discuss.elastic.co/u/t-nakata)\ **Replies:** 2\ **Last updated:** [July 20, 2020, 2:37am UTC](https://discuss.elastic.co/t/pipeline-ordered/240480 "2020-07-20T02:37:53Z")
logstash.ymlのpipeline.orderedがデフォルトの場合に以下のエラーが発生します。pipeline.orderedを「false」にすると発生しないようです。このエラーが発生する原因をご教示頂けないでしょうか Pipeline aborted due to error {:pipeline\_id=\>"correlation\_incident", :exception=\>#\ **Author:** [@Mehak\_Bhargava](https://discuss.elastic.co/u/Mehak_Bhargava)\ **Replies:** 2\ **Last updated:** [October 30, 2019, 5:54pm UTC](https://discuss.elastic.co/t/logstash-started-successfully-and-within-minute-shuts-down-automatically/205565 "2019-10-30T17:54:55Z") \[2019-10-28T16:19:39,384\]\[INFO\]\[logstash.agent \] Successfully started Logstash API endpoint {:port=\>9600} \[2019-10-28T16:19:43,944\]\[INFO\]\[logstash.runner \] Logstash shut down --- ## [\[Logstash\]\[Filebeat\] multiple logstash pipeline with filebeat](https://discuss.elastic.co/t/logstash-filebeat-multiple-logstash-pipeline-with-filebeat/186203)
**Author:** [@patimothe](https://discuss.elastic.co/u/patimothe)\ **Replies:** 2\ **Last updated:** [June 19, 2019, 12:13pm UTC](https://discuss.elastic.co/t/logstash-filebeat-multiple-logstash-pipeline-with-filebeat/186203 "2019-06-19T12:13:49Z")
Hello, I installed on a Server logstash, elasticsearch and kibana. I've got different pipelines on logstash to parse different type of logs: example: "TPW-pipeline.conf", "weblogic-pipeline.conf", "batch-pipeline.conf… --- ## [How to process event multiple times](https://discuss.elastic.co/t/how-to-process-event-multiple-times/105404)
**Author:** [@Vladimir\_Kirichenko](https://discuss.elastic.co/u/Vladimir_Kirichenko)\ **Replies:** 2\ **Last updated:** [November 7, 2017, 2:00pm UTC](https://discuss.elastic.co/t/how-to-process-event-multiple-times/105404 "2017-11-07T14:00:37Z")
Summary: In our monitoring solution we have events that are reported from CI evenironment to monitoring server using http. Each event represents build event and contains some info about builds and, what is important, s… --- ## [Kibana split based on date](https://discuss.elastic.co/t/kibana-split-based-on-date/103727)
**Author:** [@g4lvanix](https://discuss.elastic.co/u/g4lvanix)\ **Replies:** 2\ **Last updated:** [October 12, 2017, 2:49pm UTC](https://discuss.elastic.co/t/kibana-split-based-on-date/103727 "2017-10-12T14:49:38Z")
Hello! I have a question regarding visualizing data by splitting it by a date field. I have a handful of files that look like this: { "Name": "myName", "RunID": 123, "Value": 0.456, "Time": "2017-10-12T08:00:00Z" } T… --- ## [Discovery.zen.publish reports pending node, cluster gets red at index create](https://discuss.elastic.co/t/discovery-zen-publish-reports-pending-node-cluster-gets-red-at-index-create/24612)
**Author:** [@Suny](https://discuss.elastic.co/u/Suny)\ **Replies:** 2\ **Last updated:** [July 1, 2015, 1:08pm UTC](https://discuss.elastic.co/t/discovery-zen-publish-reports-pending-node-cluster-gets-red-at-index-create/24612 "2015-07-01T13:08:30Z")
Hi. Our cluster went red a week ago. Sorry in advance, I wasn't able to investigate any better. In the evening, the cluster got a pending node: \[2015-06-23 21:12:39,839\]\[WARN \]\[discovery.zen.publish \] \[xx104\] timed o… --- ## [No nodes will join cluster](https://discuss.elastic.co/t/no-nodes-will-join-cluster/11984)
**Author:** [@Sadie\_C](https://discuss.elastic.co/u/Sadie_C)\ **Replies:** 2\ **Last updated:** [May 16, 2013, 6:09am UTC](https://discuss.elastic.co/t/no-nodes-will-join-cluster/11984 "2013-05-16T06:09:56Z")
Hey there. I'm creating a 2 node cluster with es on two ec2 servers, but the nodes won't join in the same cluster... The servers/nodes discover, add each other, and then disconnect without ever joining the same… --- ## [Encryption at rest - required platinum license](https://discuss.elastic.co/t/encryption-at-rest-required-platinum-license/231184)
**Author:** [@chiara](https://discuss.elastic.co/u/chiara)\ **Replies:** 5\ **Last updated:** [May 6, 2020, 1:07pm UTC](https://discuss.elastic.co/t/encryption-at-rest-required-platinum-license/231184 "2020-05-06T13:07:31Z")
Can I use dm-crypt to encrypt data at rest if I do not have a Platinum license? I need to understand what is the advantage of the Platinum license for this specific feature. Thank you in advance --- ## [Queries with large character counts in fields](https://discuss.elastic.co/t/queries-with-large-character-counts-in-fields/192457)
**Author:** [@jmb13562](https://discuss.elastic.co/u/jmb13562)\ **Replies:** 5\ **Last updated:** [July 29, 2019, 12:26pm UTC](https://discuss.elastic.co/t/queries-with-large-character-counts-in-fields/192457 "2019-07-29T12:26:47Z")
Hi all, I've run into an issue where searching through a relatively small data set is hitting some pretty slow performance. We're running queries for text matches like "Person Name" against a dataset of around 8GB. The … --- ## [Shards not allocating based on disk space](https://discuss.elastic.co/t/shards-not-allocating-based-on-disk-space/177125)
**Author:** [@Peterson](https://discuss.elastic.co/u/Peterson)\ **Replies:** 5\ **Last updated:** [April 16, 2019, 5:20pm UTC](https://discuss.elastic.co/t/shards-not-allocating-based-on-disk-space/177125 "2019-04-16T17:20:07Z")
I have a cluster with 9 nodes, all the same size. The shards are allocating evenly in regards to the number of shards per node, but not in regards to the disk space. In reading the documentation, "Elasticsearch considers… --- ## [Kibana developlent environment failes](https://discuss.elastic.co/t/kibana-developlent-environment-failes/131944)
**Author:** [@ventrca](https://discuss.elastic.co/u/ventrca)\ **Replies:** 5\ **Last updated:** [May 17, 2018, 12:13pm UTC](https://discuss.elastic.co/t/kibana-developlent-environment-failes/131944 "2018-05-17T12:13:19Z")
I'm trying to install the development environment of kibana, but I always get the same error. error PATH/kibana/node\_modules/geckodriver: Command failed. Exit code: 1 Command: node index.js Arguments: Directory: PATH/ki… --- ## [Watcher and Shield integration issue](https://discuss.elastic.co/t/watcher-and-shield-integration-issue/98879)
**Author:** [@Boozehound77](https://discuss.elastic.co/u/Boozehound77)\ **Replies:** 5\ **Last updated:** [September 8, 2017, 8:49am UTC](https://discuss.elastic.co/t/watcher-and-shield-integration-issue/98879 "2017-09-08T08:49:47Z")
Hello, we are running Elasticsearch 2.4.1 with Shield and trying to configure watcher. Plugin installation was successfull, plugin itself is running. { "watcher\_state": "started", "watch\_count": 0, "execution\_threa… --- ## [Troubles when upgrading from 5.2.2 to 5.5.2](https://discuss.elastic.co/t/troubles-when-upgrading-from-5-2-2-to-5-5-2/98370)
**Author:** [@aeryaguzov](https://discuss.elastic.co/u/aeryaguzov)\ **Replies:** 5\ **Last updated:** [August 29, 2017, 6:55am UTC](https://discuss.elastic.co/t/troubles-when-upgrading-from-5-2-2-to-5-5-2/98370 "2017-08-29T06:55:41Z")
Hi! I'm adding new node to existing ES cluster. This cluster is running under 5.2.2 I'm install ES through Debian packages, so latest version for now is 5.5.2. Node was added successfully, but when I enable relocation… --- ## [Scaling ES indexing CPU usage](https://discuss.elastic.co/t/scaling-es-indexing-cpu-usage/39979)
**Author:** [@shaharmor](https://discuss.elastic.co/u/shaharmor)\ **Replies:** 5\ **Last updated:** [January 25, 2016, 12:17am UTC](https://discuss.elastic.co/t/scaling-es-indexing-cpu-usage/39979 "2016-01-25T00:17:28Z")
Hey, Is it possible to start ES servers that will help with indexing regarding CPU usage? And maybe just send the indexed data back to the server that is actually holding the shard itself? Or if i try that it will ju… --- ## [Support for wso2-synapse](https://discuss.elastic.co/t/support-for-wso2-synapse/258862)
**Author:** [@jvkassi](https://discuss.elastic.co/u/jvkassi)\ **Replies:** 2\ **Last updated:** [December 16, 2020, 2:43pm UTC](https://discuss.elastic.co/t/support-for-wso2-synapse/258862 "2020-12-16T14:43:06Z")
Hello, I need to know if apm-agent-java can support wso2-synapse ? Here are the list of dependencies Do i need to upgrade the spring version or jetty ? or apache synapse ? There are many dependencies for this proj… --- ## [Shield license for Elasticsearch client library maintainers?](https://discuss.elastic.co/t/shield-license-for-elasticsearch-client-library-maintainers/60656)
**Author:** [@sckott](https://discuss.elastic.co/u/sckott)\ **Replies:** 2\ **Last updated:** [September 15, 2016, 11:33pm UTC](https://discuss.elastic.co/t/shield-license-for-elasticsearch-client-library-maintainers/60656 "2016-09-15T23:33:36Z")
Is there a Shield license for people that maintain an Elasticsearch client library? I maintain the R client for Elasticsearch, and I can't really make sure my client works in the long term with only the 30 day license. … --- ## [Request payload sends encrypted data on browser](https://discuss.elastic.co/t/request-payload-sends-encrypted-data-on-browser/247106)
**Author:** [@alexandreservian](https://discuss.elastic.co/u/alexandreservian)\ **Replies:** 3\ **Last updated:** [September 4, 2020, 9:58am UTC](https://discuss.elastic.co/t/request-payload-sends-encrypted-data-on-browser/247106 "2020-09-04T09:58:23Z")
Kibana version :7.6.2 APM Agent language and version : elastic/apm-rum@5.30.0 Browser version : google chrome 84.0.4147.105 Original install method (e.g. download page, yum, deb, from source, etc.) and version : n… --- ## [How can filebeat queue.mem send more than queue.mem.events to output?](https://discuss.elastic.co/t/how-can-filebeat-queue-mem-send-more-than-queue-mem-events-to-output/184639)
**Author:** [@bschaeffer](https://discuss.elastic.co/u/bschaeffer)\ **Replies:** 3\ **Last updated:** [June 7, 2019, 4:13pm UTC](https://discuss.elastic.co/t/how-can-filebeat-queue-mem-send-more-than-queue-mem-events-to-output/184639 "2019-06-07T16:13:47Z")
I am just trying to understand how, after a log load test has stopped producing logs and files have been rotated and deleted, filebeat continues to send 100s of thousands of log messages (in my case 1MM) to my output ove… --- ## [Filebeat system and iptables module timezone offset issue](https://discuss.elastic.co/t/filebeat-system-and-iptables-module-timezone-offset-issue/176732)
**Author:** [@mback2k](https://discuss.elastic.co/u/mback2k)\ **Replies:** 3\ **Last updated:** [April 16, 2019, 7:35pm UTC](https://discuss.elastic.co/t/filebeat-system-and-iptables-module-timezone-offset-issue/176732 "2019-04-16T19:35:54Z")
Hello everyone, I am using filebeat 6.7.1 with the system, iptables, traefik and apache2 modules. For some reason I am having issues with @timestamp being incorrect for system (from /var/log/syslog\* and /var/log/auth.lo… --- ## [Filebeat with CLOGs on FreeBSD / PFsense](https://discuss.elastic.co/t/filebeat-with-clogs-on-freebsd-pfsense/167870)
**Author:** [@sdvincent](https://discuss.elastic.co/u/sdvincent)\ **Replies:** 3\ **Last updated:** [February 13, 2019, 1:32am UTC](https://discuss.elastic.co/t/filebeat-with-clogs-on-freebsd-pfsense/167870 "2019-02-13T01:32:42Z")
Continuing the discussion from Filebeat on FreeBSD / PFsense: Has there been any solution to dealing with the CLOG format? I'm running PFSENSE 2.4.4 which sits on FreeBSD 11.2 and I'm running into the same issue where l… --- ## [Index template lost after recreate es cluster in Kubernetes environment](https://discuss.elastic.co/t/index-template-lost-after-recreate-es-cluster-in-kubernetes-environment/83791)
**Author:** [@Yong\_Zhang](https://discuss.elastic.co/u/Yong_Zhang)\ **Replies:** 3\ **Last updated:** [April 28, 2017, 2:19am UTC](https://discuss.elastic.co/t/index-template-lost-after-recreate-es-cluster-in-kubernetes-environment/83791 "2017-04-28T02:19:35Z")
Hi, All I'm using Kubernetes to deploy es cluster and I'm really stuck at stability. (Referenced https://github.com/pires/kubernetes-elasticsearch-cluster) I have 3 master node and 2 client node deployed as stateless p… --- ## [Making GeoIP work for Kibana Map Visualization](https://discuss.elastic.co/t/making-geoip-work-for-kibana-map-visualization/183790)
**Author:** [@psmaan1](https://discuss.elastic.co/u/psmaan1)\ **Replies:** 1\ **Last updated:** [May 31, 2019, 9:19pm UTC](https://discuss.elastic.co/t/making-geoip-work-for-kibana-map-visualization/183790 "2019-05-31T21:19:38Z")
Hi, ELK Setup : 7.0.1. Ingesting Windows event logs using winlogbeat. I am tagging my events with a tag : "src\_public" and "dest\_public". Further, I am using geoip to get Lat/Lon information for these public IP. He… --- ## [How to convert Avro Schema to Elastic Search Mapping?](https://discuss.elastic.co/t/how-to-convert-avro-schema-to-elastic-search-mapping/114749)
**Author:** [@kant\_kodali](https://discuss.elastic.co/u/kant_kodali)\ **Replies:** 1\ **Last updated:** [January 9, 2018, 10:08pm UTC](https://discuss.elastic.co/t/how-to-convert-avro-schema-to-elastic-search-mapping/114749 "2018-01-09T22:08:31Z")
How to convert Avro Schema to Elastic Search Mapping? I have Avro records in Kafka and I want to insert these records into Elastic search in JSON so I can read and also query them but before I do that I want to create a… --- ## [Optimizer: RangeError: Invalid string length](https://discuss.elastic.co/t/optimizer-rangeerror-invalid-string-length/109495)
**Author:** [@geujvari](https://discuss.elastic.co/u/geujvari)\ **Replies:** 1\ **Last updated:** [November 29, 2017, 9:00pm UTC](https://discuss.elastic.co/t/optimizer-rangeerror-invalid-string-length/109495 "2017-11-29T21:00:22Z")
Hello, I'm using Kibana 5.5 together with ES 5.5. I'm writing my custom plugin, based on the kibana-plugin generator. It was working for a long time, but recently I cannot start kibana, because I got the following erro… --- ## [What does \_forcemerge?max\_num\_segments=1 do if the segment would be \> 500GB limit?](https://discuss.elastic.co/t/what-does--forcemerge-max-num-segments-1-do-if-the-segment-would-be-500gb-limit/82351)
**Author:** [@geena.rollins](https://discuss.elastic.co/u/geena.rollins)\ **Replies:** 1\ **Last updated:** [April 13, 2017, 8:48pm UTC](https://discuss.elastic.co/t/what-does--forcemerge-max-num-segments-1-do-if-the-segment-would-be-500gb-limit/82351 "2017-04-13T20:48:49Z")
Does a forcemerge?maxnum\_segments=1 request fail when the segment reaches 500GB. Or would the request create a second segment? We punt on recovery time in favor of 100GB shards for better search performance. This is … --- ## [NumberFormat Exception no clue to as why (resolved)](https://discuss.elastic.co/t/numberformat-exception-no-clue-to-as-why-resolved/24994)
**Author:** [@eperry](https://discuss.elastic.co/u/eperry)\ **Replies:** 1\ **Last updated:** [July 6, 2015, 10:25pm UTC](https://discuss.elastic.co/t/numberformat-exception-no-clue-to-as-why-resolved/24994 "2015-07-06T22:25:00Z")
Need some help with figuring out why this is an issue. I Was noticing some of my requests are getting dropped by the logstash-output-elasticsearch So I took a HTTP Dump of the and is seems my "process.root" is being… --- ## [Returning text snippet containing highlighted hits](https://discuss.elastic.co/t/returning-text-snippet-containing-highlighted-hits/5864)
**Author:** [@Robert\_Grundler](https://discuss.elastic.co/u/Robert_Grundler)\ **Replies:** 1\ **Last updated:** [November 14, 2011, 3:32pm UTC](https://discuss.elastic.co/t/returning-text-snippet-containing-highlighted-hits/5864 "2011-11-14T15:32:55Z")
Hi, we're indexing tables from a relational database where some fields have a rather large amount of text. What i'm trying to implement is some sort of "snippet preview" to show part of the text which contains the … --- ## [How to create Pivot table in Kibana 7.16.2](https://discuss.elastic.co/t/how-to-create-pivot-table-in-kibana-7-16-2/301937)
**Author:** [@Ely\_96](https://discuss.elastic.co/u/Ely_96)\ **Replies:** 5\ **Last updated:** [April 9, 2022, 8:44pm UTC](https://discuss.elastic.co/t/how-to-create-pivot-table-in-kibana-7-16-2/301937 "2022-04-09T20:44:11Z")
Hi, I need an help. I have a json like: \[ {"name": "Albert", "year": 1980, "class": "B"}, {"name": "John", "year": 1990, "class": "C"}, {"name": "Lerry", "year": 1990, "class": "C"}, {"name": "Joe", "year": 1980, "class… --- ## [Can I create a URL link for each data view on the Discover page?](https://discuss.elastic.co/t/can-i-create-a-url-link-for-each-data-view-on-the-discover-page/353222)
**Author:** [@its-ogawa](https://discuss.elastic.co/u/its-ogawa)\ **Replies:** 8\ **Last updated:** [February 15, 2024, 12:52pm UTC](https://discuss.elastic.co/t/can-i-create-a-url-link-for-each-data-view-on-the-discover-page/353222 "2024-02-15T12:52:08Z")
I have multiple data views maintained in Kibana's Discover. I am happy to switch between data views from the UI on Discover and see the contents of each data view, but I noticed that the URL does not contain any informa… --- ## [Default index pattern in configuration file](https://discuss.elastic.co/t/default-index-pattern-in-configuration-file/141351)
**Author:** [@abcd](https://discuss.elastic.co/u/abcd)\ **Replies:** 1\ **Last updated:** [July 24, 2018, 7:25pm UTC](https://discuss.elastic.co/t/default-index-pattern-in-configuration-file/141351 "2018-07-24T19:25:56Z")
Is there a way to configure default index pattern in configuration file so I wouldn't have to set it manually after each redeploy? --- ## [App Search - sort by nested object array field with filter](https://discuss.elastic.co/t/app-search-sort-by-nested-object-array-field-with-filter/346475)
**Author:** [@Pradeep\_Renukaiah](https://discuss.elastic.co/u/Pradeep_Renukaiah)\ **Replies:** 4\ **Last updated:** [November 6, 2023, 4:56pm UTC](https://discuss.elastic.co/t/app-search-sort-by-nested-object-array-field-with-filter/346475 "2023-11-06T16:56:16Z")
I am using App Search to fetch the results from index. When I have a root level fields, I can easily able to sort the documents. However, recently there is requirement to sort based on the nested object field and nested … --- ## [Kibana Export and Import not working](https://discuss.elastic.co/t/kibana-export-and-import-not-working/268204)
**Author:** [@Automation\_Scripts](https://discuss.elastic.co/u/Automation_Scripts)\ **Replies:** 4\ **Last updated:** [March 25, 2021, 8:10am UTC](https://discuss.elastic.co/t/kibana-export-and-import-not-working/268204 "2021-03-25T08:10:16Z")
Hi guys, Exported some Kibana dashboards and vizualizations from one computer to another and I got the same error while importing the ndjson ==\> Sorry, there was an error The file could not be processed due to error:… --- ## [Logstash Geoip filter with Packetbeat](https://discuss.elastic.co/t/logstash-geoip-filter-with-packetbeat/142985)
**Author:** [@jkevan](https://discuss.elastic.co/u/jkevan)\ **Replies:** 4\ **Last updated:** [August 10, 2018, 6:39pm UTC](https://discuss.elastic.co/t/logstash-geoip-filter-with-packetbeat/142985 "2018-08-10T18:39:07Z")
Hi everyone, to start, I'm running Logstash, elasticsearch and kibana 6.3.1 and multiple beats that are all on 6.3.2. I have loaded the various default beats index templates as outlined in https://www.elastic.co/guide/e… --- ## [LDAP multiple realms](https://discuss.elastic.co/t/ldap-multiple-realms/142323)
**Author:** [@Janardan\_Damani](https://discuss.elastic.co/u/Janardan_Damani)\ **Replies:** 4\ **Last updated:** [July 31, 2018, 4:52pm UTC](https://discuss.elastic.co/t/ldap-multiple-realms/142323 "2018-07-31T16:52:40Z")
Can we define multiple LDAP realms in elasticsearch.yml ? If so how does it work ? --- ## [Show two lines in the line graph](https://discuss.elastic.co/t/show-two-lines-in-the-line-graph/55820)
**Author:** [@Ravi\_Shanker\_Reddy](https://discuss.elastic.co/u/Ravi_Shanker_Reddy)\ **Replies:** 4\ **Last updated:** [July 21, 2016, 4:51am UTC](https://discuss.elastic.co/t/show-two-lines-in-the-line-graph/55820 "2016-07-21T04:51:39Z")
I have a csv uploaded to ES. In that 8th field contains Submit or Delivered or Undelivered. In the 12 the field I have SMSC\_no\_error or Error\_with\_system or Network\_error. Now how to plot a line graph to show how many su… --- ## [Security Logs](https://discuss.elastic.co/t/security-logs/50944)
**Author:** [@Kennedy\_Kan1](https://discuss.elastic.co/u/Kennedy_Kan1)\ **Replies:** 4\ **Last updated:** [May 25, 2016, 3:14pm UTC](https://discuss.elastic.co/t/security-logs/50944 "2016-05-25T15:14:18Z")
I have set up a ELK server. I would like to ask is there anyway to read the firewall or antivirus data and display in kibana? [Previous page](https://discuss.elastic.co/top.md?page=1171&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1173&per_page=50&period=all)