# Top

**URL:** https://discuss.elastic.co/top.md?page=1199&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1200

---

## [Create visualization like inventory in metrics tab](https://discuss.elastic.co/t/create-visualization-like-inventory-in-metrics-tab/275140)

<div class="topic-metadata">

**Author:** [@Bryce\_Fernandes](https://discuss.elastic.co/u/Bryce_Fernandes)\
**Replies:** 4\
**Last updated:** [June 8, 2021, 4:53am UTC](https://discuss.elastic.co/t/create-visualization-like-inventory-in-metrics-tab/275140 "2021-06-08T04:53:40Z")

</div>

Hi, I have created infrastructure monitoring dashboards without using metricbeat as currently there is no support for power machines. I haven't used ECS mapping. I want to create a similar visualization below in dashbo…

---

## [Filter by value on multiple events](https://discuss.elastic.co/t/filter-by-value-on-multiple-events/245907)

<div class="topic-metadata">

**Author:** [@Unkownfo](https://discuss.elastic.co/u/Unkownfo)\
**Replies:** 4\
**Last updated:** [August 24, 2020, 8:28am UTC](https://discuss.elastic.co/t/filter-by-value-on-multiple-events/245907 "2020-08-24T08:28:43Z")

</div>

Hi, I'm starting with Elastic Stack. My purpose is to handle log for many applications (stored in same index because i need to follow reference field across all applications), i got application in a json field as key/v…

---

## [Since update 6, Filebeat didn't send anything to logstash](https://discuss.elastic.co/t/since-update-6-filebeat-didnt-send-anything-to-logstash/128806)

<div class="topic-metadata">

**Author:** [@muella](https://discuss.elastic.co/u/muella)\
**Replies:** 4\
**Last updated:** [April 23, 2018, 1:27pm UTC](https://discuss.elastic.co/t/since-update-6-filebeat-didnt-send-anything-to-logstash/128806 "2018-04-23T13:27:48Z")

</div>

Hi there, I recently updated Elastic Search, Kibana and Logstash to version 6.2.4. Since then everything went fine. But when I also updated Filebeat to 6.2.4, no more input was received by it. Then I went back to Fileb…

---

## [Problem between Firefox and Kibana on Mac OS X](https://discuss.elastic.co/t/problem-between-firefox-and-kibana-on-mac-os-x/94244)

<div class="topic-metadata">

**Author:** [@abkrim](https://discuss.elastic.co/u/abkrim)\
**Replies:** 4\
**Last updated:** [July 25, 2017, 7:43am UTC](https://discuss.elastic.co/t/problem-between-firefox-and-kibana-on-mac-os-x/94244 "2017-07-25T07:43:56Z")

</div>

Hi. I am in the first step with ElasticSearch and Kibana, and after installing kibana, I found that my Firefox 54.0.1 (64-bit) browser running on macOS Sierra 10.12.5 stays forever in: Loading kibana ... THEN restart …

---

## [Where the filter cache memory allocated?](https://discuss.elastic.co/t/where-the-filter-cache-memory-allocated/51549)

<div class="topic-metadata">

**Author:** [@Selvam\_ayyanar](https://discuss.elastic.co/u/Selvam_ayyanar)\
**Replies:** 4\
**Last updated:** [June 4, 2016, 7:01am UTC](https://discuss.elastic.co/t/where-the-filter-cache-memory-allocated/51549 "2016-06-04T07:01:58Z")

</div>

Hi Team, the filter cache memory is allocated from heap? if it is allocated from heap, is the possibility to affect the gc?

---

## [Tutorial Cannot Work](https://discuss.elastic.co/t/tutorial-cannot-work/41020)

<div class="topic-metadata">

**Author:** [@gringo](https://discuss.elastic.co/u/gringo)\
**Replies:** 4\
**Last updated:** [February 6, 2016, 3:21am UTC](https://discuss.elastic.co/t/tutorial-cannot-work/41020 "2016-02-06T03:21:54Z")

</div>

Tried the tutorial in https://www.elastic.co/guide/en/beats/topbeat/current/topbeat-getting-started.html Keep getting the error after Command: PS C:\\Users\\Admin\\Downloads\\topbeat-1.1.0-windows\> Invoke-WebRequest -M…

---

## [Elasticsearch rpm creates file /usr/lib/sysctl.d/elasticsearch.conf, but doesn't apply it, so vm.max\_map\_count remains the default until reboot](https://discuss.elastic.co/t/elasticsearch-rpm-creates-file-usr-lib-sysctl-d-elasticsearch-conf-but-doesnt-apply-it-so-vm-max-map-count-remains-the-default-until-reboot/20463)

<div class="topic-metadata">

**Author:** [@Suny1](https://discuss.elastic.co/u/Suny1)\
**Replies:** 4\
**Last updated:** [October 28, 2014, 5:52pm UTC](https://discuss.elastic.co/t/elasticsearch-rpm-creates-file-usr-lib-sysctl-d-elasticsearch-conf-but-doesnt-apply-it-so-vm-max-map-count-remains-the-default-until-reboot/20463 "2014-10-28T17:52:45Z")

</div>

Hi. We checked our elasticsearch and OS settings, and found that the system parameter vm.max\_map\_count was too low. It was still the linux default, 65530, but should be increased to 262144. This value is set in /us…

---

## [Canvas filter dropdown empty](https://discuss.elastic.co/t/canvas-filter-dropdown-empty/231376)

<div class="topic-metadata">

**Author:** [@aherabit](https://discuss.elastic.co/u/aherabit)\
**Replies:** 8\
**Last updated:** [May 27, 2020, 7:50pm UTC](https://discuss.elastic.co/t/canvas-filter-dropdown-empty/231376 "2020-05-27T19:50:23Z")

</div>

Hi Folks. The filter element has a SQL query that shows valid and grouped results but the drop-down filter show nothing but '-- ANY --' essql query="SELECT vNF FROM \\"train\_nc\_e2e\\" where vNF not like 'NA' group by vNF…

---

## [Shards/routing documents imbalance problem](https://discuss.elastic.co/t/shards-routing-documents-imbalance-problem/16604)

<div class="topic-metadata">

**Author:** [@Han\_JU](https://discuss.elastic.co/u/Han_JU)\
**Replies:** 8\
**Last updated:** [March 27, 2014, 10:37am UTC](https://discuss.elastic.co/t/shards-routing-documents-imbalance-problem/16604 "2014-03-27T10:37:58Z")

</div>

Hi, We've indexed 25M documents into a single index of 128 shards with 1 replica. The \`routing\` parameter is set to a path in the document, which is an int value: \_routing: { path: "some\_id" required: t…

---

## [\[elastic-apm-remote-config-poller\] WARN org.stagemonitor.util.IOUtils - Read time out after 5000 millis](https://discuss.elastic.co/t/elastic-apm-remote-config-poller-warn-org-stagemonitor-util-ioutils-read-time-out-after-5000-millis/309342)

<div class="topic-metadata">

**Author:** [@majuca](https://discuss.elastic.co/u/majuca)\
**Replies:** 6\
**Last updated:** [July 12, 2022, 2:52pm UTC](https://discuss.elastic.co/t/elastic-apm-remote-config-poller-warn-org-stagemonitor-util-ioutils-read-time-out-after-5000-millis/309342 "2022-07-12T14:52:23Z")

</div>

Hi, my APM Java Agent runs with a Weblogic Server and logs every 5 seconds a timeout exception, although there has a connection to the APM server to get configuration changed in KIBANA (transaction\_max\_spans=100). 2022…

---

## [Elasticsearch user creation](https://discuss.elastic.co/t/elasticsearch-user-creation/145609)

<div class="topic-metadata">

**Author:** [@rijinmp](https://discuss.elastic.co/u/rijinmp)\
**Replies:** 6\
**Last updated:** [August 30, 2018, 7:10pm UTC](https://discuss.elastic.co/t/elasticsearch-user-creation/145609 "2018-08-30T19:10:10Z")

</div>

Before the elasticsearch installation , is there any need for creating a user named "elasticsearch " ( in Linux) ? I know elasticsearch installation time elasticsearch will automatically creating the "elastisearch" u…

---

## [Logging integration with OpenTelemetry](https://discuss.elastic.co/t/logging-integration-with-opentelemetry/345788)

<div class="topic-metadata">

**Author:** [@fbutter](https://discuss.elastic.co/u/fbutter)\
**Replies:** 5\
**Last updated:** [November 16, 2023, 10:40am UTC](https://discuss.elastic.co/t/logging-integration-with-opentelemetry/345788 "2023-11-16T10:40:40Z")

</div>

OpenTelemetry and W3 defines span and trace id but no transaction id. How to do the log integration without the transaction id? Kibana version: (Cloud) 8.5.3 Elasticsearch version: (Cloud) 8.5.3 APM Server version: (…

---

## [Any idea what is causing this error Elastic 2.4.2](https://discuss.elastic.co/t/any-idea-what-is-causing-this-error-elastic-2-4-2/67806)

<div class="topic-metadata">

**Author:** [@genesis](https://discuss.elastic.co/u/genesis)\
**Replies:** 5\
**Last updated:** [December 2, 2016, 8:44pm UTC](https://discuss.elastic.co/t/any-idea-what-is-causing-this-error-elastic-2-4-2/67806 "2016-12-02T20:44:33Z")

</div>

Some of our queries keep failing since we upgraded from 1.7.1 to 2.4.2, any idea what is causing these errors? \[2016-12-01 20:21:36,064\]\[ERROR\]\[marvel.agent \] \[ElasticSearch-10\] background thread had an unc…

---

## [Elasticsearch fast query but slow response time when retrieving \_source even if nested fields are in \_source\_exclude](https://discuss.elastic.co/t/elasticsearch-fast-query-but-slow-response-time-when-retrieving-source-even-if-nested-fields-are-in-source-exclude/136280)

<div class="topic-metadata">

**Author:** [@3v0k4](https://discuss.elastic.co/u/3v0k4)\
**Replies:** 1\
**Last updated:** [June 22, 2018, 6:55pm UTC](https://discuss.elastic.co/t/elasticsearch-fast-query-but-slow-response-time-when-retrieving-source-even-if-nested-fields-are-in-source-exclude/136280 "2018-06-22T18:55:07Z")

</div>

I have the following mapping { "yellows" : { "aliases" : { }, "mappings" : { "yellow" : { "properties" : { "ranges" : { "type" : "nested", "properties" : { …

---

## [Very high CPU load (how to interpret output of "top"?)](https://discuss.elastic.co/t/very-high-cpu-load-how-to-interpret-output-of-top/112269)

<div class="topic-metadata">

**Author:** [@Precision](https://discuss.elastic.co/u/Precision)\
**Replies:** 1\
**Last updated:** [December 19, 2017, 12:30pm UTC](https://discuss.elastic.co/t/very-high-cpu-load-how-to-interpret-output-of-top/112269 "2017-12-19T12:30:23Z")

</div>

I am using Logstash to send logfiles via the Gelf plugin to Graylog. My config is fairly complex, with lots of grok filters. When my system is under load the messages queue up for DAYS. I have attached the output of "…

---

## [Scripted fields Mb to bytes](https://discuss.elastic.co/t/scripted-fields-mb-to-bytes/109438)

<div class="topic-metadata">

**Author:** [@Jose\_Campos](https://discuss.elastic.co/u/Jose_Campos)\
**Replies:** 1\
**Last updated:** [November 28, 2017, 5:54pm UTC](https://discuss.elastic.co/t/scripted-fields-mb-to-bytes/109438 "2017-11-28T17:54:04Z")

</div>

Hello There is some way to convert Mb to bytes. I have a field where Mb and sometimes bytes come, but I want it to always be bytes or that number (1.9 Mb = 1.9e + 6 bytes) multiply it to be bytes. \[scrpted\] Thanks for…

---

## [Using logstash to migrate data from postgres to ES](https://discuss.elastic.co/t/using-logstash-to-migrate-data-from-postgres-to-es/26829)

<div class="topic-metadata">

**Author:** [@Freddie](https://discuss.elastic.co/u/Freddie)\
**Replies:** 1\
**Last updated:** [June 21, 2016, 5:38pm UTC](https://discuss.elastic.co/t/using-logstash-to-migrate-data-from-postgres-to-es/26829 "2016-06-21T17:38:24Z")

</div>

I'm using the logstash logstash-input-jdbc plugin. logstash conf file as follows. input { jdbc { jdbc\_driver\_library =\> "/mars/services/ows/webapps/ows/WEB-INF/lib/postgresql-8.4-701.jdbc3.jar" jdbc\_driver\_cl…

---

## [CloudWatch Integration to ELK Stack](https://discuss.elastic.co/t/cloudwatch-integration-to-elk-stack/163064)

<div class="topic-metadata">

**Author:** [@Mayank\_Khudia](https://discuss.elastic.co/u/Mayank_Khudia)\
**Replies:** 3\
**Last updated:** [January 6, 2019, 5:39am UTC](https://discuss.elastic.co/t/cloudwatch-integration-to-elk-stack/163064 "2019-01-06T05:39:26Z")

</div>

Hello Team, I am trying to integrate CloudWatch Logs to ELK stack. I have successfully managed to install all 3 components of the stack. But still unable to monitor and visualize log streams from CloudWatch. I have set …

---

## [Sort data by field in Elasticsearch](https://discuss.elastic.co/t/sort-data-by-field-in-elasticsearch/67463)

<div class="topic-metadata">

**Author:** [@aniketpatil](https://discuss.elastic.co/u/aniketpatil)\
**Replies:** 3\
**Last updated:** [November 29, 2016, 10:57am UTC](https://discuss.elastic.co/t/sort-data-by-field-in-elasticsearch/67463 "2016-11-29T10:57:22Z")

</div>

I have written elasticsearch query using java api in which status count is fetched per day. Code: SearchResponse responseOutput = client.prepareSearch(ConstantsValue.indexName) .setTypes(ConstantsValue.\_Type) .setFetc…

---

## [Reduce size of index which contains integer fields only](https://discuss.elastic.co/t/reduce-size-of-index-which-contains-integer-fields-only/26963)

<div class="topic-metadata">

**Author:** [@pinokio](https://discuss.elastic.co/u/pinokio)\
**Replies:** 3\
**Last updated:** [August 7, 2015, 10:12am UTC](https://discuss.elastic.co/t/reduce-size-of-index-which-contains-integer-fields-only/26963 "2015-08-07T10:12:46Z")

</div>

Hi, I am trying to create an index from integer fields only, like that { "type" : 2, "cat\_id": 1, "value": 12.22, "date" : "2015-01-01T00:00:00" } Does anyone experience the similar circumstance, please give give me advi…

---

## [Not able to create delete policy for index](https://discuss.elastic.co/t/not-able-to-create-delete-policy-for-index/281844)

<div class="topic-metadata">

**Author:** [@pratik\_jain163](https://discuss.elastic.co/u/pratik_jain163)\
**Replies:** 2\
**Last updated:** [August 18, 2021, 9:34pm UTC](https://discuss.elastic.co/t/not-able-to-create-delete-policy-for-index/281844 "2021-08-18T21:34:25Z")

</div>

I am trying to create a policy from AWS ES kibana dev tool and got this message {"Message":"Your request: '/\_ilm/policy/my\_policy' is not allowed."} PUT \_ilm/policy/my\_policy { "policy": { "phases": { …

---

## [Ansible Elasticsearch Hangs on TASK \[elastic.elasticsearch : Wait for elasticsearch to startup\]](https://discuss.elastic.co/t/ansible-elasticsearch-hangs-on-task-elastic-elasticsearch-wait-for-elasticsearch-to-startup/241734)

<div class="topic-metadata">

**Author:** [@M\_M](https://discuss.elastic.co/u/M_M)\
**Replies:** 2\
**Last updated:** [July 30, 2020, 5:04am UTC](https://discuss.elastic.co/t/ansible-elasticsearch-hangs-on-task-elastic-elasticsearch-wait-for-elasticsearch-to-startup/241734 "2020-07-30T05:04:06Z")

</div>

The elasticsearch initiates successfully on the nodes but somehow ansible is stuck at TASK \[elastic.elasticsearch : Wait for elasticsearch to startup\] My nodes are EC2 Amazon linux 2 and ansible is run from my desktop…

---

## [Automatically overwrite all saved objects?](https://discuss.elastic.co/t/automatically-overwrite-all-saved-objects/156415)

<div class="topic-metadata">

**Author:** [@Balu](https://discuss.elastic.co/u/Balu)\
**Replies:** 2\
**Last updated:** [April 1, 2019, 8:31pm UTC](https://discuss.elastic.co/t/automatically-overwrite-all-saved-objects/156415 "2019-04-01T20:31:59Z")

</div>

Hello Elastic searchers, this might be a silly question, but does Management =\> Kibana / Saved Objects =\> Import =\> Automatically overwrite all saved objects? actually overwrite all saved objects (so there's only the on…

---

## [Vídeo does not exist](https://discuss.elastic.co/t/video-does-not-exist/90320)

<div class="topic-metadata">

**Author:** [@danielkmb2](https://discuss.elastic.co/u/danielkmb2)\
**Replies:** 2\
**Last updated:** [June 21, 2017, 4:17pm UTC](https://discuss.elastic.co/t/video-does-not-exist/90320 "2017-06-21T16:17:37Z")

</div>

Hello! Im with the "X-Pack Machine Learning", and something seems to be broken with the "Installing X-Pack" lesson. The video frame says: Sorry, This video does not exist. Best Regards, Daniel

---

## [Filebeat module exclude\_files](https://discuss.elastic.co/t/filebeat-module-exclude-files/84862)

<div class="topic-metadata">

**Author:** [@cmodijk](https://discuss.elastic.co/u/cmodijk)\
**Replies:** 2\
**Last updated:** [May 11, 2017, 6:21am UTC](https://discuss.elastic.co/t/filebeat-module-exclude-files/84862 "2017-05-11T06:21:30Z")

</div>

When using filebeat I can use exclude\_files on a prospector but i'm not sure if this can also be done for a a module like the apache2 logs. I added my config but i want to exclude 1 domain from the apache2 logs. http…

---

## [Iframe performance on iPad](https://discuss.elastic.co/t/iframe-performance-on-ipad/81670)

<div class="topic-metadata">

**Author:** [@bikerpilot](https://discuss.elastic.co/u/bikerpilot)\
**Replies:** 2\
**Last updated:** [April 10, 2017, 3:49pm UTC](https://discuss.elastic.co/t/iframe-performance-on-ipad/81670 "2017-04-10T15:49:34Z")

</div>

Hi All, We have developed an app that uses Kibana dashboards in an iframe. This all works well on Android (phone, tablet), iOS on Macbook, Chrome on Windows, etc. However it is not workable on the iPad. The dashboar…

---

## [Crash when reading DataFrame](https://discuss.elastic.co/t/crash-when-reading-dataframe/58511)

<div class="topic-metadata">

**Author:** [@m-kiuchi](https://discuss.elastic.co/u/m-kiuchi)\
**Replies:** 2\
**Last updated:** [August 23, 2016, 10:55am UTC](https://discuss.elastic.co/t/crash-when-reading-dataframe/58511 "2016-08-23T10:55:51Z")

</div>

Environment: ES: 5.0.0\_alpha5 Spark: 1.6.2 ( vanilla-precompiled spark-1.6.2-bin-hadoop2.6.tgz) Python: 2.6.6 ES-Hadoop: 5.0.0-alpha5 Symptom Spark with python has succeed to load ES index, but cannot read dataframe an…

---

## [Spark 1.5.1 + Elastic Search Integration](https://discuss.elastic.co/t/spark-1-5-1-elastic-search-integration/34254)

<div class="topic-metadata">

**Author:** [@mpals](https://discuss.elastic.co/u/mpals)\
**Replies:** 2\
**Last updated:** [April 29, 2016, 3:52pm UTC](https://discuss.elastic.co/t/spark-1-5-1-elastic-search-integration/34254 "2016-04-29T15:52:25Z")

</div>

SBT dependency libraryDependencies += "org.elasticsearch" % "elasticsearch-spark\_2.10" % "2.2.0-m1" Leads to following error: java.lang.NoClassDefFoundError: org/elasticsearch/spark/rdd/EsSpark$ // Code snippet…

---

## [ES\_DIRECT\_SIZE doesn't work](https://discuss.elastic.co/t/es-direct-size-doesnt-work/47705)

<div class="topic-metadata">

**Author:** [@Arvind\_Kumar\_Chigura](https://discuss.elastic.co/u/Arvind_Kumar_Chigura)\
**Replies:** 2\
**Last updated:** [April 18, 2016, 11:40pm UTC](https://discuss.elastic.co/t/es-direct-size-doesnt-work/47705 "2016-04-18T23:40:03Z")

</div>

I am setting both ES\_DIRECT\_SIZE: 2048 and XX:MaxDirectMemorySize=2048m. But still ES working set in windows goes beyond 10G. I am doing simple searches against a 26GB index.

---

## [Ruby filter, load csv file to add field](https://discuss.elastic.co/t/ruby-filter-load-csv-file-to-add-field/44322)

<div class="topic-metadata">

**Author:** [@patou](https://discuss.elastic.co/u/patou)\
**Replies:** 2\
**Last updated:** [March 16, 2016, 11:23am UTC](https://discuss.elastic.co/t/ruby-filter-load-csv-file-to-add-field/44322 "2016-03-16T11:23:34Z")

</div>

hi, i need to load a csv file in a ruby filter to add fields to the document. will the csv file be loaded for each line of the input or only once ? cdt patrick

---

## [Elasticsearch for Apache Hadoop 2.1 released](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-2-1-released/24279)

<div class="topic-metadata">

**Author:** [@shaunak](https://discuss.elastic.co/u/shaunak)\
**Replies:** 2\
**Last updated:** [June 25, 2015, 8:57am UTC](https://discuss.elastic.co/t/elasticsearch-for-apache-hadoop-2-1-released/24279 "2015-06-25T08:57:51Z")

</div>

ES-hadoop 2.1 has been released now! You can download it here and read more about what went into it in this this blog post.

---

## [Importing dashboards into multiple spaces through the kibana api](https://discuss.elastic.co/t/importing-dashboards-into-multiple-spaces-through-the-kibana-api/332599)

<div class="topic-metadata">

**Author:** [@CarolynR](https://discuss.elastic.co/u/CarolynR)\
**Replies:** 4\
**Last updated:** [May 9, 2023, 12:42pm UTC](https://discuss.elastic.co/t/importing-dashboards-into-multiple-spaces-through-the-kibana-api/332599 "2023-05-09T12:42:04Z")

</div>

I have saved objects that I am trying to import into 2 different spaces. This worked under kibana 7, but is broken under kibana 8. I use s/spacename in the url when working with the different spaces Importing into the…

---

## [How to filter Filebeat output by input id?](https://discuss.elastic.co/t/how-to-filter-filebeat-output-by-input-id/329603)

<div class="topic-metadata">

**Author:** [@paolovalladolid](https://discuss.elastic.co/u/paolovalladolid)\
**Replies:** 4\
**Last updated:** [April 10, 2023, 9:44pm UTC](https://discuss.elastic.co/t/how-to-filter-filebeat-output-by-input-id/329603 "2023-04-10T21:44:02Z")

</div>

I configured filebeat.yml as follows: filebeat.inputs: - type: filestream id: my-input1 paths: - /opt/mything1/logs/\*.log - type: filestream id: my-input2 paths: - /opt/mything2/logs/\*.log - type: file…

---

## [How can I disable x-pack on ECK](https://discuss.elastic.co/t/how-can-i-disable-x-pack-on-eck/247186)

<div class="topic-metadata">

**Author:** [@packy](https://discuss.elastic.co/u/packy)\
**Replies:** 4\
**Last updated:** [September 2, 2020, 9:06am UTC](https://discuss.elastic.co/t/how-can-i-disable-x-pack-on-eck/247186 "2020-09-02T09:06:33Z")

</div>

Hi , I am using ECK on mips64el platform. However the x-pack does not support mips64el. How can I disable x-pack module ?

---

## [Metricbeat system module, processes seems to only see metricbeat.exe](https://discuss.elastic.co/t/metricbeat-system-module-processes-seems-to-only-see-metricbeat-exe/158964)

<div class="topic-metadata">

**Author:** [@devops\_mike](https://discuss.elastic.co/u/devops_mike)\
**Replies:** 4\
**Last updated:** [December 4, 2018, 2:26pm UTC](https://discuss.elastic.co/t/metricbeat-system-module-processes-seems-to-only-see-metricbeat-exe/158964 "2018-12-04T14:26:37Z")

</div>

I am using metricbeats v 6.4. I would like to see top 5 processes by CPU and Memory. However I only see metricbeat.exe for system.process.name. I added the processes filter and set it to regex on anything ('.'). After th…

---

## [Unable to perform incremental load](https://discuss.elastic.co/t/unable-to-perform-incremental-load/134230)

<div class="topic-metadata">

**Author:** [@Deepak\_Dandotiya](https://discuss.elastic.co/u/Deepak_Dandotiya)\
**Replies:** 4\
**Last updated:** [June 7, 2018, 11:20am UTC](https://discuss.elastic.co/t/unable-to-perform-incremental-load/134230 "2018-06-07T11:20:00Z")

</div>

Hello, I am new to elasticsearch and logstash. Now I am running below emp-index-logstash.conf file using logstash to perform the incremental load using \<./logstash -f /data/deepak/logstash-6.2.4/bin/emp-index-logstash.…

---

## [Curator 5.4.1 exits gracefully but does nothing](https://discuss.elastic.co/t/curator-5-4-1-exits-gracefully-but-does-nothing/111071)

<div class="topic-metadata">

**Author:** [@jalker](https://discuss.elastic.co/u/jalker)\
**Replies:** 4\
**Last updated:** [December 11, 2017, 1:01pm UTC](https://discuss.elastic.co/t/curator-5-4-1-exits-gracefully-but-does-nothing/111071 "2017-12-11T13:01:37Z")

</div>

I have just installed curator 5.4.1 on a CentOS 7 machine to access an Elasticsearch 5.6 instance. The install seems okay $curator --version curator, version 5.4.1 but curator always exits gracefully with an exit sta…

---

## [Gem dependency version conflict among logstash plugins](https://discuss.elastic.co/t/gem-dependency-version-conflict-among-logstash-plugins/55590)

<div class="topic-metadata">

**Author:** [@kaung](https://discuss.elastic.co/u/kaung)\
**Replies:** 4\
**Last updated:** [July 24, 2016, 5:28am UTC](https://discuss.elastic.co/t/gem-dependency-version-conflict-among-logstash-plugins/55590 "2016-07-24T05:28:39Z")

</div>

I am pretty new to ruby ecosystem; so apologies first if I am missing something basic :slight\_smile: I understand that plugins are maintained and released separately from logstash-core. Furthermore, plugins are mainta…

---

## [Connecting elastic search through pyspark](https://discuss.elastic.co/t/connecting-elastic-search-through-pyspark/283170)

<div class="topic-metadata">

**Author:** [@Destructord007](https://discuss.elastic.co/u/Destructord007)\
**Replies:** 1\
**Last updated:** [December 7, 2021, 6:56pm UTC](https://discuss.elastic.co/t/connecting-elastic-search-through-pyspark/283170 "2021-12-07T18:56:32Z")

</div>

def main(): es\_read\_conf = { "es.nodes": "ES\_LINK", "es.port": "9200", "es.net.http.auth.user": 'ES\_USERNAME', "es.net.http.auth.pass":'ES\_PASSWORD', } print("ES\_CONF\_START") …

---

## [Unable to search double quotes from kibana/query](https://discuss.elastic.co/t/unable-to-search-double-quotes-from-kibana-query/223113)

<div class="topic-metadata">

**Author:** [@ibtisam\_tahir](https://discuss.elastic.co/u/ibtisam_tahir)\
**Replies:** 1\
**Last updated:** [March 11, 2020, 11:55am UTC](https://discuss.elastic.co/t/unable-to-search-double-quotes-from-kibana-query/223113 "2020-03-11T11:55:58Z")

</div>

I have some records in my document with 4" , 2" . I want to search 4" but I can only search 4. Elastic is unable to search " from my records. I have tried searching with different methods in my query. I also tried search…

---

## [Adding more data nodes decreased primary indexing rate](https://discuss.elastic.co/t/adding-more-data-nodes-decreased-primary-indexing-rate/94692)

<div class="topic-metadata">

**Author:** [@ELK\_GB](https://discuss.elastic.co/u/ELK_GB)\
**Replies:** 7\
**Last updated:** [July 29, 2017, 6:15am UTC](https://discuss.elastic.co/t/adding-more-data-nodes-decreased-primary-indexing-rate/94692 "2017-07-29T06:15:20Z")

</div>

Hi There, I have been running different capacity and performance test scenarios on our ELK cluster and today I have noticed something that didn't make sense to me. I had 4 data nodes and 2 coordinating nodes that I s…

---

## [Logstash.inputs.udp - EOFError: End of file reached](https://discuss.elastic.co/t/logstash-inputs-udp-eoferror-end-of-file-reached/73212)

<div class="topic-metadata">

**Author:** [@drolfe](https://discuss.elastic.co/u/drolfe)\
**Replies:** 1\
**Last updated:** [February 5, 2017, 1:32am UTC](https://discuss.elastic.co/t/logstash-inputs-udp-eoferror-end-of-file-reached/73212 "2017-02-05T01:32:56Z")

</div>

HI, I"m getting this error after 30 minutes or so, udp port is open but nothing gets indexed until I restart logstash load looks to only be 100 events a second app versions elasticsearch 5.1.1 all kibana …

---

## [Disabling dynamic mapping](https://discuss.elastic.co/t/disabling-dynamic-mapping/20662)

<div class="topic-metadata">

**Author:** [@pulkitsinghal](https://discuss.elastic.co/u/pulkitsinghal)\
**Replies:** 1\
**Last updated:** [November 10, 2014, 4:58pm UTC](https://discuss.elastic.co/t/disabling-dynamic-mapping/20662 "2014-11-10T16:58:14Z")

</div>

What does the json in the CURL request for this look like? The dynamic creation of mappings for unmapped types can be completely disabled by setting \*index.mapper.dynamic\* to false. http://www.elasticsearch.org/gui…

---

## [Unable to configure curator to archive data from Elasticsearch](https://discuss.elastic.co/t/unable-to-configure-curator-to-archive-data-from-elasticsearch/323354)

<div class="topic-metadata">

**Author:** [@Pendela-BhargavaSai](https://discuss.elastic.co/u/Pendela-BhargavaSai)\
**Replies:** 5\
**Last updated:** [March 20, 2023, 3:37pm UTC](https://discuss.elastic.co/t/unable-to-configure-curator-to-archive-data-from-elasticsearch/323354 "2023-03-20T15:37:39Z")

</div>

Hi I am a newbie to Elastic search. In my project we are working on archiving data using Curator. I am trying to configure the curator with Elasticsearch but unable to do that. I am facing some connectivity issues for c…

---

## [How to extract terms into a new field while indexing](https://discuss.elastic.co/t/how-to-extract-terms-into-a-new-field-while-indexing/174805)

<div class="topic-metadata">

**Author:** [@David9](https://discuss.elastic.co/u/David9)\
**Replies:** 5\
**Last updated:** [April 3, 2019, 2:09pm UTC](https://discuss.elastic.co/t/how-to-extract-terms-into-a-new-field-while-indexing/174805 "2019-04-03T14:09:00Z")

</div>

We often encounter a need to extract special terms from our documents, e.g. phone numbers, twitter handles, hashtags. Often this can be done with regular expressions, not fancy entity extraction tools. We realize that …

---

## [Unable to send winlogbeat data to logstash](https://discuss.elastic.co/t/unable-to-send-winlogbeat-data-to-logstash/143404)

<div class="topic-metadata">

**Author:** [@ravikt](https://discuss.elastic.co/u/ravikt)\
**Replies:** 6\
**Last updated:** [August 10, 2018, 10:05am UTC](https://discuss.elastic.co/t/unable-to-send-winlogbeat-data-to-logstash/143404 "2018-08-10T10:05:10Z")

</div>

I have Both metricbeat and winlogbeat agents installed on same AWS EC2 windows instance. I am trying to push the data to logstash. Logstash is just processing metricbeat data but not for winlogbeat. I am using metricb…

---

## [Need help on kibana for visualize from kv filter](https://discuss.elastic.co/t/need-help-on-kibana-for-visualize-from-kv-filter/96890)

<div class="topic-metadata">

**Author:** [@Amity4](https://discuss.elastic.co/u/Amity4)\
**Replies:** 6\
**Last updated:** [August 16, 2017, 12:35am UTC](https://discuss.elastic.co/t/need-help-on-kibana-for-visualize-from-kv-filter/96890 "2017-08-16T00:35:29Z")

</div>

so, i need to change this message to column and filter it with type=traffic , subtype=forward and visualize it. can anyone help me? thankyou

---

## [Help with designing our document for graphs. Indexing single nodes in graph with thousands of incoming edges](https://discuss.elastic.co/t/help-with-designing-our-document-for-graphs-indexing-single-nodes-in-graph-with-thousands-of-incoming-edges/20069)

<div class="topic-metadata">

**Author:** [@Todd\_Nine](https://discuss.elastic.co/u/Todd_Nine)\
**Replies:** 6\
**Last updated:** [October 8, 2014, 9:29am UTC](https://discuss.elastic.co/t/help-with-designing-our-document-for-graphs-indexing-single-nodes-in-graph-with-thousands-of-incoming-edges/20069 "2014-10-08T09:29:55Z")

</div>

Hey guys, We're currently storing entities and edges in Cassandra. The entities are JSON, and edges are directed edges with a source---type--\>target. We're using ElasticSearch for indexing and I could really use…

---

## [Marvel index.html is giving Blank page](https://discuss.elastic.co/t/marvel-index-html-is-giving-blank-page/18594)

<div class="topic-metadata">

**Author:** [@srinu\_konda](https://discuss.elastic.co/u/srinu_konda)\
**Replies:** 6\
**Last updated:** [August 31, 2014, 6:52pm UTC](https://discuss.elastic.co/t/marvel-index-html-is-giving-blank-page/18594 "2014-08-31T18:52:08Z")

</div>

Hi, Am using Elastic search(\*elasticsearch-1.1.1\*) marvel plugin in my windows machine, I have downloaded and placed \*marvel-1.1.1.jar\* in \*elasticsearch-1.1.1\\lib\* folder. I have restarted my ES server and tryin…

---

## [Date range query ignore month](https://discuss.elastic.co/t/date-range-query-ignore-month/17281)

<div class="topic-metadata">

**Author:** [@fatih](https://discuss.elastic.co/u/fatih)\
**Replies:** 6\
**Last updated:** [August 8, 2014, 5:55am UTC](https://discuss.elastic.co/t/date-range-query-ignore-month/17281 "2014-08-08T05:55:15Z")

</div>

Hi guys, I've been using Elasticsearch as my data store and I got lots of documents in it. My problem is, I figured it out that Elasticsearch does ignore month field regarding mapping and I can not get real searc…

[Previous page](https://discuss.elastic.co/top.md?page=1198&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1200&per_page=50&period=all)
