# Top

**URL:** https://discuss.elastic.co/top.md?page=1217&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1218

---

## [Passing gateway.expected\_nodes as a command line parameter?](https://discuss.elastic.co/t/passing-gateway-expected-nodes-as-a-command-line-parameter/24918)

<div class="topic-metadata">

**Author:** [@Sacheendra\_Talluri](https://discuss.elastic.co/u/Sacheendra_Talluri)\
**Replies:** 3\
**Last updated:** [July 6, 2015, 5:57pm UTC](https://discuss.elastic.co/t/passing-gateway-expected-nodes-as-a-command-line-parameter/24918 "2015-07-06T17:57:08Z")

</div>

Would passing expected nodes to elasticsearch as a command line parameter like this work? "elasticsearch -Des.gateway.expected\_nodes=2"

---

## [Handling Multiple Templates in Logstash](https://discuss.elastic.co/t/handling-multiple-templates-in-logstash/1367)

<div class="topic-metadata">

**Author:** [@Suganthi\_Thangavel](https://discuss.elastic.co/u/Suganthi_Thangavel)\
**Replies:** 3\
**Last updated:** [June 5, 2015, 8:27am UTC](https://discuss.elastic.co/t/handling-multiple-templates-in-logstash/1367 "2015-06-05T08:27:35Z")

</div>

I have two different csv files with few columns having same name but different data types and i created different templates. How to handle both templates in one conf file. Please help me.

---

## [Elastic Search Bulk API (Delete) vs DeleteByQuery](https://discuss.elastic.co/t/elastic-search-bulk-api-delete-vs-deletebyquery/243617)

<div class="topic-metadata">

**Author:** [@jbiju94](https://discuss.elastic.co/u/jbiju94)\
**Replies:** 4\
**Last updated:** [August 6, 2020, 3:26am UTC](https://discuss.elastic.co/t/elastic-search-bulk-api-delete-vs-deletebyquery/243617 "2020-08-06T03:26:00Z")

</div>

My requirement is to delete a particular document (with doc\_id) from multiple indices in one go. But the catch is that I am not aware which all indices would have this doc and I will have to fire a delete request for the…

---

## [Odd indices created automatically - what is happening?](https://discuss.elastic.co/t/odd-indices-created-automatically-what-is-happening/38711)

<div class="topic-metadata">

**Author:** [@hpniemitube](https://discuss.elastic.co/u/hpniemitube)\
**Replies:** 4\
**Last updated:** [January 8, 2016, 11:45am UTC](https://discuss.elastic.co/t/odd-indices-created-automatically-what-is-happening/38711 "2016-01-08T11:45:59Z")

</div>

Hi, Just started to use ES 2.1.1. I have several servers with a logstash 1.5.6-1. Now I noticed, that in addition to the correct daily index, that is created automatically: ylefi\_drupalsv-2016.01.08 5 2 576213 0 1.1g…

---

## [Index corruption when upload large number of documents (4billion+)](https://discuss.elastic.co/t/index-corruption-when-upload-large-number-of-documents-4billion/21549)

<div class="topic-metadata">

**Author:** [@Darshat](https://discuss.elastic.co/u/Darshat)\
**Replies:** 4\
**Last updated:** [January 9, 2015, 5:45pm UTC](https://discuss.elastic.co/t/index-corruption-when-upload-large-number-of-documents-4billion/21549 "2015-01-09T17:45:23Z")

</div>

Hi, We have a 98 node cluster of ES with each node 32GB RAM. 16GB is reserved for ES via config file. The index has 98 shards with 2 replicas. On this cluster we are loading a large number of documents (when done …

---

## [Elasticsearchversion 7.17.9 is not starting - Exception in thread "main" java.lang.RuntimeException: starting java](https://discuss.elastic.co/t/elasticsearchversion-7-17-9-is-not-starting-exception-in-thread-main-java-lang-runtimeexception-starting-java/330658)

<div class="topic-metadata">

**Author:** [@kirankumarb](https://discuss.elastic.co/u/kirankumarb)\
**Replies:** 5\
**Last updated:** [April 25, 2023, 5:48am UTC](https://discuss.elastic.co/t/elasticsearchversion-7-17-9-is-not-starting-exception-in-thread-main-java-lang-runtimeexception-starting-java/330658 "2023-04-25T05:48:42Z")

</div>

Elasticsearch 7.8 is upgraded to version 7.17.9, then unable to start the service. And in logs getting following Error: Exception in thread "main" java.lang.RuntimeException: starting java.

---

## [No services found in kibana services tab](https://discuss.elastic.co/t/no-services-found-in-kibana-services-tab/329001)

<div class="topic-metadata">

**Author:** [@APandey](https://discuss.elastic.co/u/APandey)\
**Replies:** 5\
**Last updated:** [April 4, 2023, 2:43am UTC](https://discuss.elastic.co/t/no-services-found-in-kibana-services-tab/329001 "2023-04-04T02:43:56Z")

</div>

Hi everyone, I have upgraded the ELK stack on my server from version 8.1.1 to 8.6.2. After upgrading when I went to see the services running in Kibana, no services were visible there also in traces tab no traces were co…

---

## [Logstash Not Starting On Reboot - Ubuntu](https://discuss.elastic.co/t/logstash-not-starting-on-reboot-ubuntu/318406)

<div class="topic-metadata">

**Author:** [@AlP9923](https://discuss.elastic.co/u/AlP9923)\
**Replies:** 5\
**Last updated:** [November 11, 2022, 5:19pm UTC](https://discuss.elastic.co/t/logstash-not-starting-on-reboot-ubuntu/318406 "2022-11-11T17:19:51Z")

</div>

Hi My single node setup works fine except on reboot of the Ubuntu server when Logstash usually does not auto start up. But using the systemctl start logstash works ok. It looks like the issue is that Logstash is trying…

---

## [Best way to form a cluster](https://discuss.elastic.co/t/best-way-to-form-a-cluster/315680)

<div class="topic-metadata">

**Author:** [@FredericB](https://discuss.elastic.co/u/FredericB)\
**Replies:** 5\
**Last updated:** [October 5, 2022, 11:19am UTC](https://discuss.elastic.co/t/best-way-to-form-a-cluster/315680 "2022-10-05T11:19:30Z")

</div>

Hi there, i'm new to ELK and also read lot of documentations from elastic.co I've tested many combinations to form a cluster and wondering can't find the best way to form it: 1-Creating the 1st Node (that is also a clu…

---

## [How do we monitor specific counters related to elastic search?](https://discuss.elastic.co/t/how-do-we-monitor-specific-counters-related-to-elastic-search/50688)

<div class="topic-metadata">

**Author:** [@sravani\_amarachinta](https://discuss.elastic.co/u/sravani_amarachinta)\
**Replies:** 5\
**Last updated:** [May 24, 2016, 8:49am UTC](https://discuss.elastic.co/t/how-do-we-monitor-specific-counters-related-to-elastic-search/50688 "2016-05-24T08:49:39Z")

</div>

how do we monitor specific counters related to elastic search? How do we enable JMX monitoring in elastic search? Is there any way to configure?

---

## [How to print multiple text rows with vega](https://discuss.elastic.co/t/how-to-print-multiple-text-rows-with-vega/296085)

<div class="topic-metadata">

**Author:** [@TUKTUK](https://discuss.elastic.co/u/TUKTUK)\
**Replies:** 2\
**Last updated:** [February 6, 2022, 5:47pm UTC](https://discuss.elastic.co/t/how-to-print-multiple-text-rows-with-vega/296085 "2022-02-06T17:47:22Z")

</div>

Hi, all I am pretty new to the Vega world inside Kibana and was wondering if there is some easy way to simply print text fields in rows. I know that Vega is not designed to output text, nevertheless, someone knows maybe…

---

## [Underlying file changed by an external force](https://discuss.elastic.co/t/underlying-file-changed-by-an-external-force/258648)

<div class="topic-metadata">

**Author:** [@sandeepkanabar](https://discuss.elastic.co/u/sandeepkanabar)\
**Replies:** 2\
**Last updated:** [December 17, 2020, 12:13pm UTC](https://discuss.elastic.co/t/underlying-file-changed-by-an-external-force/258648 "2020-12-17T12:13:10Z")

</div>

Hi Team, Of late, I've started seeing these errors in ES 6.8.6 cluster. I have this cluster since March but these errors started appearing only recently: \[2020-12-14T00:00:04,122\]\[WARN \]\[o.e.c.r.a.AllocationService\] \[n…

---

## [Timelion Count is Incorrect](https://discuss.elastic.co/t/timelion-count-is-incorrect/177528)

<div class="topic-metadata">

**Author:** [@AddChickpeas](https://discuss.elastic.co/u/AddChickpeas)\
**Replies:** 2\
**Last updated:** [April 23, 2019, 4:17pm UTC](https://discuss.elastic.co/t/timelion-count-is-incorrect/177528 "2019-04-23T16:17:33Z")

</div>

I was playing around with a very simple Timelion graph and am perplexed by some of the results. The interval window is set to 30m: // .es(index=myindex-\*, q="Failed to log on", timefield=@timestamp).lines() When I make…

---

## [Kibana dashboard unaccessible](https://discuss.elastic.co/t/kibana-dashboard-unaccessible/147244)

<div class="topic-metadata">

**Author:** [@sandipatmca](https://discuss.elastic.co/u/sandipatmca)\
**Replies:** 2\
**Last updated:** [September 5, 2018, 3:10pm UTC](https://discuss.elastic.co/t/kibana-dashboard-unaccessible/147244 "2018-09-05T15:10:36Z")

</div>

Hi, I have xpack installed on ELasticSearch & Kibana .Both the application are up and running (sudo systmectl status kiabana.service & elasticsearch.service) shows active (running). But I am not able to access my Kiban…

---

## [How to count the metric ‘count’ values in kibana?](https://discuss.elastic.co/t/how-to-count-the-metric-count-values-in-kibana/74849)

<div class="topic-metadata">

**Author:** [@Lyncean\_Cura](https://discuss.elastic.co/u/Lyncean_Cura)\
**Replies:** 2\
**Last updated:** [February 13, 2017, 10:17pm UTC](https://discuss.elastic.co/t/how-to-count-the-metric-count-values-in-kibana/74849 "2017-02-13T22:17:38Z")

</div>

HI, I want to count the terms on the basis of the 'count' values. Like 4-terms have count more than 5 3-terms have count more than 2 Is it possible on Kibana ? Thanks!

---

## [Less than 1 Interval values?](https://discuss.elastic.co/t/less-than-1-interval-values/55201)

<div class="topic-metadata">

**Author:** [@Hoss](https://discuss.elastic.co/u/Hoss)\
**Replies:** 2\
**Last updated:** [July 19, 2016, 5:01pm UTC](https://discuss.elastic.co/t/less-than-1-interval-values/55201 "2016-07-19T17:01:51Z")

</div>

While creating histogram, I noticed the interval value is integer only. I have data where one of the fields ranges from 1-3 using decimal values. So I really need to be able to have interval values of numbers like .2, .4…

---

## [Error parsing json](https://discuss.elastic.co/t/error-parsing-json/3646)

<div class="topic-metadata">

**Author:** [@Anurag\_Phadke](https://discuss.elastic.co/u/Anurag_Phadke)\
**Replies:** 2\
**Last updated:** [December 10, 2010, 4:58am UTC](https://discuss.elastic.co/t/error-parsing-json/3646 "2010-12-10T04:58:11Z")

</div>

We are using the REST API to retrieve results from ES, query below: curl -XGET 'http://:9200/\_search?' -d ' { "query" : { "bool" : { "must" : \[ { "field"…

---

## [Elasticsearch docker ulimit](https://discuss.elastic.co/t/elasticsearch-docker-ulimit/124157)

<div class="topic-metadata">

**Author:** [@Fei\_Yao](https://discuss.elastic.co/u/Fei_Yao)\
**Replies:** 0\
**Last updated:** [March 15, 2018, 6:00pm UTC](https://discuss.elastic.co/t/elasticsearch-docker-ulimit/124157 "2018-03-15T18:00:21Z")

</div>

first of all, my Elasticsearch docker (under unprivileged mode, and using office Elasticsearch docker image from https://www.docker.elastic.co/) has passed boostrap check by setting correct vm.max\_map\_count, etc. One thi…

---

## [Clarifying the difference between Active shards and in-sync copies](https://discuss.elastic.co/t/clarifying-the-difference-between-active-shards-and-in-sync-copies/238716)

<div class="topic-metadata">

**Author:** [@paulcarey](https://discuss.elastic.co/u/paulcarey)\
**Replies:** 2\
**Last updated:** [July 15, 2020, 9:06am UTC](https://discuss.elastic.co/t/clarifying-the-difference-between-active-shards-and-in-sync-copies/238716 "2020-07-15T09:06:18Z")

</div>

Hi The replication docs state a single in-sync copy is sufficient to serve read requests and then, when describing the read model, the same doc states that the basic flow Select\[s\] an active copy of each relevant …

---

## [Cross Cluster search, switching to an empty backup cluster](https://discuss.elastic.co/t/cross-cluster-search-switching-to-an-empty-backup-cluster/274601)

<div class="topic-metadata">

**Author:** [@driveirk](https://discuss.elastic.co/u/driveirk)\
**Replies:** 7\
**Last updated:** [June 2, 2021, 4:59am UTC](https://discuss.elastic.co/t/cross-cluster-search-switching-to-an-empty-backup-cluster/274601 "2021-06-02T04:59:37Z")

</div>

Hello, I want to make a backup cluster for Cross Cluster search. I selected proxy\_mod, I use Haproxy as a proxy Haproxy configuration example: server work 1.1.1.1:9300 check on-marked-up shutdown-backup-sessions on-m…

---

## [Wrong indexes with syslog](https://discuss.elastic.co/t/wrong-indexes-with-syslog/176899)

<div class="topic-metadata">

**Author:** [@Farhad\_Kocharli](https://discuss.elastic.co/u/Farhad_Kocharli)\
**Replies:** 7\
**Last updated:** [April 17, 2019, 5:08am UTC](https://discuss.elastic.co/t/wrong-indexes-with-syslog/176899 "2019-04-17T05:08:16Z")

</div>

I have configured Logstash (see below configuration) to get logs from Cisco devices with syslog. Despite I have configured in "output" section index (index =\> "network-%{+YYYY.MM.dd}") on Kibana side I see wron…

---

## [Kibana 7.0 startup error - getConnections has been called](https://discuss.elastic.co/t/kibana-7-0-startup-error-getconnections-has-been-called/177721)

<div class="topic-metadata">

**Author:** [@eduardovieira](https://discuss.elastic.co/u/eduardovieira)\
**Replies:** 1\
**Last updated:** [April 22, 2019, 11:11pm UTC](https://discuss.elastic.co/t/kibana-7-0-startup-error-getconnections-has-been-called/177721 "2019-04-22T23:11:15Z")

</div>

Hello everyone! I feel like I have a simple problem, but I am unable to fix it. Whenever I try to start kibana, I get a timeout error. It seems like it is trying to connect to my elasticsearch instance but getting no r…

---

## [Elasticsearch cache seems doesn't work](https://discuss.elastic.co/t/elasticsearch-cache-seems-doesnt-work/88371)

<div class="topic-metadata">

**Author:** [@zangrong](https://discuss.elastic.co/u/zangrong)\
**Replies:** 1\
**Last updated:** [June 7, 2017, 2:03am UTC](https://discuss.elastic.co/t/elasticsearch-cache-seems-doesnt-work/88371 "2017-06-07T02:03:52Z")

</div>

Hi, I deployed an Elasticsearch5.4 cluster on server. It seems that the cache of Elasticsearch doesnt' work. Here is the detail. One server with CentOS6.7, 16 cores and 64 GB memory. A cluster with 2 nodes on this s…

---

## [Cannot create index in elasticsearch](https://discuss.elastic.co/t/cannot-create-index-in-elasticsearch/52185)

<div class="topic-metadata">

**Author:** [@fabriziodb](https://discuss.elastic.co/u/fabriziodb)\
**Replies:** 1\
**Last updated:** [June 14, 2016, 7:38am UTC](https://discuss.elastic.co/t/cannot-create-index-in-elasticsearch/52185 "2016-06-14T07:38:43Z")

</div>

Hi, i just installed ElasticSearch on Windows7 x64. i'm learning from "definitive guide" , when try to create new index the request will be in infinite loading status PUT http://localhost:9200/megacorp/employee/1

---

## [Elasticsearch on Client node not working properly](https://discuss.elastic.co/t/elasticsearch-on-client-node-not-working-properly/49937)

<div class="topic-metadata">

**Author:** [@sharon.c](https://discuss.elastic.co/u/sharon.c)\
**Replies:** 1\
**Last updated:** [May 13, 2016, 12:00am UTC](https://discuss.elastic.co/t/elasticsearch-on-client-node-not-working-properly/49937 "2016-05-13T00:00:46Z")

</div>

We set up a 3 nodes elasticsearch cluster, 1 Master (data) node, 1 data node, and 1 client node. Client node elasticsearch.yml file cluster.name: elkstats node.name: clientnode node.master: false node.data: false …

---

## [Error: Request error, retrying - connect EMFILE](https://discuss.elastic.co/t/error-request-error-retrying-connect-emfile/308681)

<div class="topic-metadata">

**Author:** [@mcolla](https://discuss.elastic.co/u/mcolla)\
**Replies:** 6\
**Last updated:** [July 1, 2022, 9:54pm UTC](https://discuss.elastic.co/t/error-request-error-retrying-connect-emfile/308681 "2022-07-01T21:54:03Z")

</div>

I have 240k requests to insert on Elasticsearch, but i get the error: How can I fix this?

---

## [Indies turn to red status and unable to connect after removing monitor-es-\*](https://discuss.elastic.co/t/indies-turn-to-red-status-and-unable-to-connect-after-removing-monitor-es/235002)

<div class="topic-metadata">

**Author:** [@Huy\_Le1](https://discuss.elastic.co/u/Huy_Le1)\
**Replies:** 6\
**Last updated:** [June 1, 2020, 7:01am UTC](https://discuss.elastic.co/t/indies-turn-to-red-status-and-unable-to-connect-after-removing-monitor-es/235002 "2020-06-01T07:01:30Z")

</div>

Hi, I've removed some .monitoring-es-\* indexes cause they are too large and I never use them. After that, all indexes were created on the same day as those .monitoring-es-\* indexes turned to red and unable to connect. …

---

## [\[Resolved\]Logstash - data is not aggregrated in chronological order of a httpsession and output file looks like in Json format](https://discuss.elastic.co/t/resolved-logstash-data-is-not-aggregrated-in-chronological-order-of-a-httpsession-and-output-file-looks-like-in-json-format/178835)

<div class="topic-metadata">

**Author:** [@cheriemilk](https://discuss.elastic.co/u/cheriemilk)\
**Replies:** 6\
**Last updated:** [May 2, 2019, 6:02am UTC](https://discuss.elastic.co/t/resolved-logstash-data-is-not-aggregrated-in-chronological-order-of-a-httpsession-and-output-file-looks-like-in-json-format/178835 "2019-05-02T06:02:12Z")

</div>

Hi Team, Logstash configuraiton run as below input { file{ path =\> "C:/elkstack/elasticsearch-6.5.1/logs/userscenario.csv" start\_position =\> "beginning" sincedb\_path =\> "C:/elkstack/elasticsearch-6.5.1/sincedb/sinc…

---

## [Timestamp want to store in index as date datatype](https://discuss.elastic.co/t/timestamp-want-to-store-in-index-as-date-datatype/159653)

<div class="topic-metadata">

**Author:** [@Sanchit\_Gupta](https://discuss.elastic.co/u/Sanchit_Gupta)\
**Replies:** 6\
**Last updated:** [December 7, 2018, 4:57am UTC](https://discuss.elastic.co/t/timestamp-want-to-store-in-index-as-date-datatype/159653 "2018-12-07T04:57:52Z")

</div>

Hi Experts, i am using filebeat to read the soa logs and want msg\_timestamp value store in index as date datatype. Please help me how to create the index on msg\_timestamp. Below is my machine description: OS : Linux 7 …

---

## [Retrieve inner\_hits when searching multiple kNN fields in same nested document](https://discuss.elastic.co/t/retrieve-inner-hits-when-searching-multiple-knn-fields-in-same-nested-document/350024)

<div class="topic-metadata">

**Author:** [@Jasper\_Simon](https://discuss.elastic.co/u/Jasper_Simon)\
**Replies:** 3\
**Last updated:** [January 3, 2024, 8:20am UTC](https://discuss.elastic.co/t/retrieve-inner-hits-when-searching-multiple-knn-fields-in-same-nested-document/350024 "2024-01-03T08:20:42Z")

</div>

I've got this use case (examples here are simplified to the essentials) where I want to do a knn search on multiple vectors of the same nested document inside a larger document, and be able to distinguish which of the ne…

---

## [Where can I access the logs sent to Elasticsearch?](https://discuss.elastic.co/t/where-can-i-access-the-logs-sent-to-elasticsearch/306259)

<div class="topic-metadata">

**Author:** [@BenGur](https://discuss.elastic.co/u/BenGur)\
**Replies:** 3\
**Last updated:** [June 3, 2022, 6:35pm UTC](https://discuss.elastic.co/t/where-can-i-access-the-logs-sent-to-elasticsearch/306259 "2022-06-03T18:35:00Z")

</div>

Hello, I am trying to access the log files sent to Elasticsearch outside of the Kibana browser but don't know where to find them. I am running Elasticsearch on a remote CentOS 7 server with another AWS CentOS 7 server …

---

## [Qradar Logs to Logstash/Elastic?](https://discuss.elastic.co/t/qradar-logs-to-logstash-elastic/274385)

<div class="topic-metadata">

**Author:** [@mohamed\_el\_mannouti](https://discuss.elastic.co/u/mohamed_el_mannouti)\
**Replies:** 3\
**Last updated:** [May 30, 2021, 12:58am UTC](https://discuss.elastic.co/t/qradar-logs-to-logstash-elastic/274385 "2021-05-30T00:58:02Z")

</div>

we have a Qradar SIEM which we plan to extend to Elastic for threat hunting(Log Forwarding from Qradar to Elastic) Has anyone found any success with it. Any known shortcomings/pitfalls from the setup.

---

## [Alerting Error rate](https://discuss.elastic.co/t/alerting-error-rate/234348)

<div class="topic-metadata">

**Author:** [@Rodrigo\_Testa](https://discuss.elastic.co/u/Rodrigo_Testa)\
**Replies:** 3\
**Last updated:** [May 27, 2020, 5:21pm UTC](https://discuss.elastic.co/t/alerting-error-rate/234348 "2020-05-27T17:21:34Z")

</div>

Hello, I'm using the new alerting system and I was wondering if there's a way to make an alert for error rate in percentage as threshold. Now only is available numeric count as 20 or 50 errors in a minute and so on. One…

---

## [Upgrade from basic to gold](https://discuss.elastic.co/t/upgrade-from-basic-to-gold/183762)

<div class="topic-metadata">

**Author:** [@Fedele\_Mantuano](https://discuss.elastic.co/u/Fedele_Mantuano)\
**Replies:** 3\
**Last updated:** [June 3, 2019, 3:29pm UTC](https://discuss.elastic.co/t/upgrade-from-basic-to-gold/183762 "2019-06-03T15:29:50Z")

</div>

Hi community, I have an Elastic cluster version 6.7.0: 6 elastic nodes 2 logstash nodes 3 kibana nodes We enabled basic license without security module. All cluster is installed with ansible. Now we bought gold lice…

---

## [Having trouble assigning value from field A to field B](https://discuss.elastic.co/t/having-trouble-assigning-value-from-field-a-to-field-b/135546)

<div class="topic-metadata">

**Author:** [@JimP](https://discuss.elastic.co/u/JimP)\
**Replies:** 3\
**Last updated:** [June 12, 2018, 4:38pm UTC](https://discuss.elastic.co/t/having-trouble-assigning-value-from-field-a-to-field-b/135546 "2018-06-12T16:38:53Z")

</div>

We have a field \[env\_id\] which is sent from filebeat. In logstash, I want to assign this value to field, \[topic\]\[env\], but am failing miserably. Here's the latest that I've tried which doesn't work. This should be str…

---

## [Elastic search memory heap exception when trying to index large document by chunks](https://discuss.elastic.co/t/elastic-search-memory-heap-exception-when-trying-to-index-large-document-by-chunks/65924)

<div class="topic-metadata">

**Author:** [@kiet.tran](https://discuss.elastic.co/u/kiet.tran)\
**Replies:** 3\
**Last updated:** [November 15, 2016, 9:15am UTC](https://discuss.elastic.co/t/elastic-search-memory-heap-exception-when-trying-to-index-large-document-by-chunks/65924 "2016-11-15T09:15:03Z")

</div>

Hello there, Setup: the elastic search version that we are using is 2.3.5 we set es java heap size to be 4GB and then set bootstrap.mlockall: true UseCase: We have a use case where we would like to index very large d…

---

## [Cardinality Aggregation Hashes Only](https://discuss.elastic.co/t/cardinality-aggregation-hashes-only/17975)

<div class="topic-metadata">

**Author:** [@msukmanowsky](https://discuss.elastic.co/u/msukmanowsky)\
**Replies:** 3\
**Last updated:** [July 18, 2016, 3:41pm UTC](https://discuss.elastic.co/t/cardinality-aggregation-hashes-only/17975 "2016-07-18T15:41:11Z")

</div>

Hi there, We're using ES for web analytics purposes and so far, have loved the experience. We create hourly indexes that contain only one type of "url" document which has multiple metrics fields like "page\_views"…

---

## [Simultaneous indexing and searching in 2 threads gets "Failed to execute phase" exception](https://discuss.elastic.co/t/simultaneous-indexing-and-searching-in-2-threads-gets-failed-to-execute-phase-exception/21768)

<div class="topic-metadata">

**Author:** [@TimOnGmail](https://discuss.elastic.co/u/TimOnGmail)\
**Replies:** 8\
**Last updated:** [January 26, 2015, 8:44pm UTC](https://discuss.elastic.co/t/simultaneous-indexing-and-searching-in-2-threads-gets-failed-to-execute-phase-exception/21768 "2015-01-26T20:44:14Z")

</div>

I have a situation where, using the Java API, I initiate a bunch of indexing operations, but throw away the Future object (I don't need the return status). This is so I can do a lot of indexing reasonably asynchro…

---

## [Elasticsearch not assigning replica shards and not reallocating](https://discuss.elastic.co/t/elasticsearch-not-assigning-replica-shards-and-not-reallocating/21072)

<div class="topic-metadata">

**Author:** [@Sebastian\_Schepens](https://discuss.elastic.co/u/Sebastian_Schepens)\
**Replies:** 3\
**Last updated:** [December 4, 2014, 1:42pm UTC](https://discuss.elastic.co/t/elasticsearch-not-assigning-replica-shards-and-not-reallocating/21072 "2014-12-04T13:42:32Z")

</div>

I have an issue with elasticsearch version 1.4.1, i had indexes without replicas and i recently i added 1 replica to all indexes and they are not getting allocated. I also have an issue when using cluster setting to…

---

## [NumberFormatException when sorting by numeric document ID](https://discuss.elastic.co/t/numberformatexception-when-sorting-by-numeric-document-id/15767)

<div class="topic-metadata">

**Author:** [@Benji\_Smith](https://discuss.elastic.co/u/Benji_Smith)\
**Replies:** 8\
**Last updated:** [February 14, 2014, 4:32pm UTC](https://discuss.elastic.co/t/numberformatexception-when-sorting-by-numeric-document-id/15767 "2014-02-14T16:32:57Z")

</div>

Hello hello! I have a bizarre error I've been trying to debug for a few weeks with no luck, and I'm finally left to conclude that it may be a bug in ElasticSearch. Once every few days, I start seeing shard failure…

---

## [Flexible index mappings](https://discuss.elastic.co/t/flexible-index-mappings/6651)

<div class="topic-metadata">

**Author:** [@Ivan](https://discuss.elastic.co/u/Ivan)\
**Replies:** 8\
**Last updated:** [March 16, 2012, 5:14pm UTC](https://discuss.elastic.co/t/flexible-index-mappings/6651 "2012-03-16T17:14:03Z")

</div>

In my current setup, I am configuring new index mappings via a file on each node. File-based mappings allow me to change items at the application level and not via code, and are easier to manage in source-control. H…

---

## [How to load external configuration file?](https://discuss.elastic.co/t/how-to-load-external-configuration-file/228757)

<div class="topic-metadata">

**Author:** [@kelk](https://discuss.elastic.co/u/kelk)\
**Replies:** 4\
**Last updated:** [April 28, 2020, 10:05am UTC](https://discuss.elastic.co/t/how-to-load-external-configuration-file/228757 "2020-04-28T10:05:27Z")

</div>

hi we are trying to modularize all of the configurations as a standard. As per the https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-configuration-reloading.html link . I couldn't find a precise way of doi…

---

## [Visualize some kind of rolling sum?](https://discuss.elastic.co/t/visualize-some-kind-of-rolling-sum/195774)

<div class="topic-metadata">

**Author:** [@cgmelastic](https://discuss.elastic.co/u/cgmelastic)\
**Replies:** 4\
**Last updated:** [August 20, 2019, 3:01pm UTC](https://discuss.elastic.co/t/visualize-some-kind-of-rolling-sum/195774 "2019-08-20T15:01:01Z")

</div>

Okay, let's say I'm getting sporadic deliveries of something, approximately every 2-3 hours but sometimes 2 in quick succession, sometimes none for 8 hours, etc. Each time a delivery is made, the amount delivered is put …

---

## [Logstash avro parse error](https://discuss.elastic.co/t/logstash-avro-parse-error/127898)

<div class="topic-metadata">

**Author:** [@questbit](https://discuss.elastic.co/u/questbit)\
**Replies:** 4\
**Last updated:** [April 17, 2018, 5:48am UTC](https://discuss.elastic.co/t/logstash-avro-parse-error/127898 "2018-04-17T05:48:24Z")

</div>

Hi I am trying to process an avro file from logstash. version - jdk 1.8 - logstash 6.2.2 - https://github.com/logstash-plugins/logstash-codec-avro 3.2.3 logstash test.conf input { file { path =\> \["test.avro"\] c…

---

## [How to do bulk insert from Hive to Elasticsearch?](https://discuss.elastic.co/t/how-to-do-bulk-insert-from-hive-to-elasticsearch/54936)

<div class="topic-metadata">

**Author:** [@ravi\_yadav](https://discuss.elastic.co/u/ravi_yadav)\
**Replies:** 4\
**Last updated:** [July 8, 2016, 2:18am UTC](https://discuss.elastic.co/t/how-to-do-bulk-insert-from-hive-to-elasticsearch/54936 "2016-07-08T02:18:00Z")

</div>

I know that there is a bulk API in ES which can load data from a file, stating that file should have metadata/action before actual data for all the records. However my use case is to load data from Hive to ES which i'm…

---

## [I am not getting network inbound & outbound traffic details in Kibana dashboard](https://discuss.elastic.co/t/i-am-not-getting-network-inbound-outbound-traffic-details-in-kibana-dashboard/195142)

<div class="topic-metadata">

**Author:** [@vishnuvardhan](https://discuss.elastic.co/u/vishnuvardhan)\
**Replies:** 2\
**Last updated:** [August 15, 2019, 3:05pm UTC](https://discuss.elastic.co/t/i-am-not-getting-network-inbound-outbound-traffic-details-in-kibana-dashboard/195142 "2019-08-15T15:05:33Z")

</div>

Actually i created metricbeat pipeline from logstash to elasticsearch. i am getting all metric details in graph except network inbound & outbound traffic details graph.please suggest which metrics and settings i need to …

---

## [Missing dependencies](https://discuss.elastic.co/t/missing-dependencies/36996)

<div class="topic-metadata">

**Author:** [@Raul\_Uria](https://discuss.elastic.co/u/Raul_Uria)\
**Replies:** 2\
**Last updated:** [December 11, 2015, 11:48pm UTC](https://discuss.elastic.co/t/missing-dependencies/36996 "2015-12-11T23:48:56Z")

</div>

Hi, I´m trying to compile elasticsearch v2.1.0, so I´ve check out it and 'mvn compile' but some denpencies are missing, any idea? \[ERROR\] Failed to execute goal on project distributions: Could not resolve dependencies …

---

## [ELK 8.1: loading std. dashboards failing w/error 403](https://discuss.elastic.co/t/elk-8-1-loading-std-dashboards-failing-w-error-403/300093)

<div class="topic-metadata">

**Author:** [@stefws](https://discuss.elastic.co/u/stefws)\
**Replies:** 1\
**Last updated:** [March 19, 2022, 2:00am UTC](https://discuss.elastic.co/t/elk-8-1-loading-std-dashboards-failing-w-error-403/300093 "2022-03-19T02:00:31Z")

</div>

On a PoC v.8.1 single elastic node + kibana + grafana, I'm trying to load std. metricbeat dashboards etc. into kibana like below only it returns an 403 error: $ metricbeat setup dashboards -c /etc/metricbeat/metricbeat.…

---

## [Custom logs multiline](https://discuss.elastic.co/t/custom-logs-multiline/295280)

<div class="topic-metadata">

**Author:** [@Requium](https://discuss.elastic.co/u/Requium)\
**Replies:** 1\
**Last updated:** [February 4, 2022, 9:10am UTC](https://discuss.elastic.co/t/custom-logs-multiline/295280 "2022-02-04T09:10:19Z")

</div>

Im trying to add multiline to the custom log integration configuration for elastic agent, i tryied the following way: multiline.type: pattern multiline.pattern: '\[0-9\]{4}-\[0-9\]{2}-\[0-9\]{2}' multiline.negate: true multi…

---

## [Not able to start kibana after enabling ssl encryption in elk stack](https://discuss.elastic.co/t/not-able-to-start-kibana-after-enabling-ssl-encryption-in-elk-stack/242396)

<div class="topic-metadata">

**Author:** [@Matish\_Bhuyan](https://discuss.elastic.co/u/Matish_Bhuyan)\
**Replies:** 1\
**Last updated:** [July 27, 2020, 8:38am UTC](https://discuss.elastic.co/t/not-able-to-start-kibana-after-enabling-ssl-encryption-in-elk-stack/242396 "2020-07-27T08:38:38Z")

</div>

Hi All, After installing the plugin and enabling the ssl b/w elasticsearch ,kibana and logstash when i restarted my kibana service getting this below error and not able to view the kibana screen {"type":"error","@time…

[Previous page](https://discuss.elastic.co/top.md?page=1216&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1218&per_page=50&period=all)
