# Top

**URL:** https://discuss.elastic.co/top.md?page=1220&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1221

---

## [How to do Mathematical calculation on grok filter output](https://discuss.elastic.co/t/how-to-do-mathematical-calculation-on-grok-filter-output/244063)

<div class="topic-metadata">

**Author:** [@saurabhc](https://discuss.elastic.co/u/saurabhc)\
**Replies:** 2\
**Last updated:** [August 6, 2020, 5:52pm UTC](https://discuss.elastic.co/t/how-to-do-mathematical-calculation-on-grok-filter-output/244063 "2020-08-06T17:52:55Z")

</div>

My Input file looks like below. MemoryTotal: 100831888 kB MemoryFree: 1212388 kB MemoryAvailable: 49997588 kB I am filtering the values like "MemFree:\\s+%{NUMBER:mem\_free}","MemTotal:\\s+%{NUMBER:mem\_tot…

---

## [Installed X-Pack but Monitoring Menu doesn't appear on Kibana](https://discuss.elastic.co/t/installed-x-pack-but-monitoring-menu-doesnt-appear-on-kibana/106658)

<div class="topic-metadata">

**Author:** [@taty](https://discuss.elastic.co/u/taty)\
**Replies:** 2\
**Last updated:** [November 7, 2017, 4:17pm UTC](https://discuss.elastic.co/t/installed-x-pack-but-monitoring-menu-doesnt-appear-on-kibana/106658 "2017-11-07T16:17:04Z")

</div>

I've installed X-Pack on Elastic and Kibana; however, on Kibana interface the Monitoring menu doesn't appear. The version I'm running is 5.4.0 and x-pack was installed using zip file bin/elasticsearch-plugin list --v…

---

## [Elastic Cloudを複数ユーザで利用する機能はありますか？](https://discuss.elastic.co/t/elastic-cloud/71682)

<div class="topic-metadata">

**Author:** [@tjinjin](https://discuss.elastic.co/u/tjinjin)\
**Replies:** 2\
**Last updated:** [February 15, 2017, 12:02pm UTC](https://discuss.elastic.co/t/elastic-cloud/71682 "2017-02-15T12:02:21Z")

</div>

Elastic Cloudのフリープランを試しているのですが、会社などで利用する場合の所謂オーガニゼーション管理（オーガニゼーションを作り、そこに人をぶら下げて権限を与えるような仕組み）といったような仕組みを見つけられませんでした。 そういった機能は用意されているでしょうか？ ない場合は、どのように運用していくのがベターでしょうか？ ご存じの方いらっしゃいましたらご教示をお願い致します。

---

## [Cannot add filters](https://discuss.elastic.co/t/cannot-add-filters/68096)

<div class="topic-metadata">

**Author:** [@Alex\_153](https://discuss.elastic.co/u/Alex_153)\
**Replies:** 2\
**Last updated:** [December 8, 2016, 6:05pm UTC](https://discuss.elastic.co/t/cannot-add-filters/68096 "2016-12-08T18:05:48Z")

</div>

I cannot add a new filter in Kibana if a custom filter is already present. Repro: 1. In Discover tab, expand a log entry. 2. Add a filter for any value (click on the looking glass with plus sign in it) Result: a ne…

---

## [How can I debug the Elasticsource code use Eclipse or Intellij](https://discuss.elastic.co/t/how-can-i-debug-the-elasticsource-code-use-eclipse-or-intellij/36120)

<div class="topic-metadata">

**Author:** [@caominghua](https://discuss.elastic.co/u/caominghua)\
**Replies:** 2\
**Last updated:** [December 2, 2015, 11:07am UTC](https://discuss.elastic.co/t/how-can-i-debug-the-elasticsource-code-use-eclipse-or-intellij/36120 "2015-12-02T11:07:48Z")

</div>

I just want to debug the ElasticSearch source code in Eclipse, how can i do this. thanks

---

## [Possible to store aggregation results in a new index](https://discuss.elastic.co/t/possible-to-store-aggregation-results-in-a-new-index/35546)

<div class="topic-metadata">

**Author:** [@sonia](https://discuss.elastic.co/u/sonia)\
**Replies:** 2\
**Last updated:** [November 28, 2015, 11:33am UTC](https://discuss.elastic.co/t/possible-to-store-aggregation-results-in-a-new-index/35546 "2015-11-28T11:33:02Z")

</div>

Hi, I want to store results of an elasticsearch aggregation in a new index, In other words I want all of documents that match aggregation are stored in a new index. please help me.

---

## [GET \_doc request not working as expected with routing aliases](https://discuss.elastic.co/t/get-doc-request-not-working-as-expected-with-routing-aliases/285039)

<div class="topic-metadata">

**Author:** [@vineethsuhas](https://discuss.elastic.co/u/vineethsuhas)\
**Replies:** 3\
**Last updated:** [September 26, 2021, 3:55am UTC](https://discuss.elastic.co/t/get-doc-request-not-working-as-expected-with-routing-aliases/285039 "2021-09-26T03:55:28Z")

</div>

Hi, Here is the scenario: 1. We created an index (routing\_test) =\> (with 2 Shards) 2. We created a couple of aliases on that index (routing\_test\_100 and routing\_test\_200) using: PUT routing\_test/\_alias/routing\_test\_100…

---

## [Calculating time between two events from same request id](https://discuss.elastic.co/t/calculating-time-between-two-events-from-same-request-id/354880)

<div class="topic-metadata">

**Author:** [@Mohammad\_Alam](https://discuss.elastic.co/u/Mohammad_Alam)\
**Replies:** 3\
**Last updated:** [March 20, 2024, 2:45pm UTC](https://discuss.elastic.co/t/calculating-time-between-two-events-from-same-request-id/354880 "2024-03-20T14:45:57Z")

</div>

I am new to Elastic and Kibana so any help here would be helpful. I have logs coming in to elastic where a request with a unique id will go through various action stages, from request created to request approved to requ…

---

## [Documentation search button](https://discuss.elastic.co/t/documentation-search-button/198661)

<div class="topic-metadata">

**Author:** [@jsu](https://discuss.elastic.co/u/jsu)\
**Replies:** 3\
**Last updated:** [September 9, 2019, 2:11pm UTC](https://discuss.elastic.co/t/documentation-search-button/198661 "2019-09-09T14:11:51Z")

</div>

Hi, I don't know if I'm at the right place to say this, but there seems to be a problem with the search button in the documentation ( https://www.elastic.co/guide/index.html# ) : it doesn't work at all for me today on …

---

## [How to parse filebeat access log with vhost?](https://discuss.elastic.co/t/how-to-parse-filebeat-access-log-with-vhost/133102)

<div class="topic-metadata">

**Author:** [@nycterent](https://discuss.elastic.co/u/nycterent)\
**Replies:** 3\
**Last updated:** [May 29, 2018, 6:53am UTC](https://discuss.elastic.co/t/how-to-parse-filebeat-access-log-with-vhost/133102 "2018-05-29T06:53:52Z")

</div>

hello, is there a simple way to parse virtual host from nginx logs with filebeat? any hints would be appreciated :)\]

---

## [APM node agent does not capture mysql queries](https://discuss.elastic.co/t/apm-node-agent-does-not-capture-mysql-queries/127925)

<div class="topic-metadata">

**Author:** [@shaharyar](https://discuss.elastic.co/u/shaharyar)\
**Replies:** 3\
**Last updated:** [April 13, 2018, 1:04pm UTC](https://discuss.elastic.co/t/apm-node-agent-does-not-capture-mysql-queries/127925 "2018-04-13T13:04:40Z")

</div>

We setup APM agent in our nodejs application. It captures requests even made by other npm too (which is very good), but it does not capture any queries to mysql. We are using squelize as ORM to mysql.

---

## [Returning non connected results?](https://discuss.elastic.co/t/returning-non-connected-results/51080)

<div class="topic-metadata">

**Author:** [@astanway](https://discuss.elastic.co/u/astanway)\
**Replies:** 3\
**Last updated:** [May 26, 2016, 5:07pm UTC](https://discuss.elastic.co/t/returning-non-connected-results/51080 "2016-05-26T17:07:04Z")

</div>

Often when I search for a term, I get a few disjoint sets, with no edges between them. I would think the results should be strongly connected. Why are some nodes returned that cannot be connected with the returned search…

---

## [Raw JSON ( unstructured data ) handling with elastic C# API](https://discuss.elastic.co/t/raw-json-unstructured-data-handling-with-elastic-c-api/105637)

<div class="topic-metadata">

**Author:** [@vivek\_kumar\_Jain](https://discuss.elastic.co/u/vivek_kumar_Jain)\
**Replies:** 0\
**Last updated:** [October 28, 2017, 9:38am UTC](https://discuss.elastic.co/t/raw-json-unstructured-data-handling-with-elastic-c-api/105637 "2017-10-28T09:38:23Z")

</div>

We are working on an application, where we receive data in json format from different sources and different format and user can also add such sources there own, So we don't know json format what properties will be there …

---

## [This behavior is deprecated. Specify JAVA\_HOME](https://discuss.elastic.co/t/this-behavior-is-deprecated-specify-java-home/268544)

<div class="topic-metadata">

**Author:** [@jtvdw](https://discuss.elastic.co/u/jtvdw)\
**Replies:** 1\
**Last updated:** [March 29, 2021, 12:09am UTC](https://discuss.elastic.co/t/this-behavior-is-deprecated-specify-java-home/268544 "2021-03-29T00:09:46Z")

</div>

Hi, I ran into a error when I installed the latest version of ActiveCollab, it makes use of ES6 and not ES7, not sure why, I had ES7 installed but ActiveCollab confirmed I need to use ES6 for it to work. Here is the er…

---

## [Kibana action webhook failing](https://discuss.elastic.co/t/kibana-action-webhook-failing/257855)

<div class="topic-metadata">

**Author:** [@Alexhutchinson](https://discuss.elastic.co/u/Alexhutchinson)\
**Replies:** 1\
**Last updated:** [December 7, 2020, 3:58pm UTC](https://discuss.elastic.co/t/kibana-action-webhook-failing/257855 "2020-12-07T15:58:53Z")

</div>

Hi! I have an 7.10 stack running in ECK, and have a webhook Alert and Action set up (Linked to a custom Security Detection Rule). The webhook endpoint is HTTPS with a self-signed certificate. When hitting test on the c…

---

## [CircuitBreaker: \[parent\] Data too large, data for \[\<transport\_request\>\]](https://discuss.elastic.co/t/circuitbreaker-parent-data-too-large-data-for-transport-request/193837)

<div class="topic-metadata">

**Author:** [@pjaikumar](https://discuss.elastic.co/u/pjaikumar)\
**Replies:** 1\
**Last updated:** [August 8, 2019, 4:19pm UTC](https://discuss.elastic.co/t/circuitbreaker-parent-data-too-large-data-for-transport-request/193837 "2019-08-08T16:19:23Z")

</div>

Hi, We are having a cluster running in Elastic search version 7.1.1 , details below. 1.) 4 node cluster where 3 nodes act as Data node and also is master-eligible and one node configured as coordinating only node. 2.) …

---

## [Update documents with painless - nested and not nested objects with the same name](https://discuss.elastic.co/t/update-documents-with-painless-nested-and-not-nested-objects-with-the-same-name/184617)

<div class="topic-metadata">

**Author:** [@Martin\_Becker](https://discuss.elastic.co/u/Martin_Becker)\
**Replies:** 1\
**Last updated:** [June 7, 2019, 9:43am UTC](https://discuss.elastic.co/t/update-documents-with-painless-nested-and-not-nested-objects-with-the-same-name/184617 "2019-06-07T09:43:55Z")

</div>

I messed up my documents and want to clean them up. I want to do this using \_update\_by\_query and painless script. I run Elastic version 5.6 and my documents hold nested objects which hold tracking info as a nested objec…

---

## [Logstash docker pipeline volume not mounting](https://discuss.elastic.co/t/logstash-docker-pipeline-volume-not-mounting/173642)

<div class="topic-metadata">

**Author:** [@iEMH](https://discuss.elastic.co/u/iEMH)\
**Replies:** 1\
**Last updated:** [March 29, 2019, 1:10pm UTC](https://discuss.elastic.co/t/logstash-docker-pipeline-volume-not-mounting/173642 "2019-03-29T13:10:28Z")

</div>

Hi, I am hoping someone can help me spot where am I doing a mistake. I am trying to spin up a simple logstash docker container (oss) with a persistent volume mounted to the default pipeline directory. However, when I …

---

## [Inheritance of mappings](https://discuss.elastic.co/t/inheritance-of-mappings/12149)

<div class="topic-metadata">

**Author:** [@Bjoern\_Zapadlo](https://discuss.elastic.co/u/Bjoern_Zapadlo)\
**Replies:** 1\
**Last updated:** [May 29, 2013, 6:14pm UTC](https://discuss.elastic.co/t/inheritance-of-mappings/12149 "2013-05-29T18:14:26Z")

</div>

Hi, is it possible to have kind of inheritance in a mapping. That means that properties in specific type are added to properties of default? Examle: { "settings": { "mapper" : { "dynamic": false…

---

## [Kibana 8.19.7, 9.1.7, and 9.2.1 Security Update (ESA-2025-24)](https://discuss.elastic.co/t/kibana-8-19-7-9-1-7-and-9-2-1-security-update-esa-2025-24/383381)

<div class="topic-metadata">

**Author:** [@ismisepaul](https://discuss.elastic.co/u/ismisepaul)\
**Replies:** 0\
**Last updated:** [November 12, 2025, 9:41am UTC](https://discuss.elastic.co/t/kibana-8-19-7-9-1-7-and-9-2-1-security-update-esa-2025-24/383381 "2025-11-12T09:41:39Z")

</div>

Kibana Origin Validation Error (ESA-2025-24) Origin Validation Error in Kibana can lead to Server-Side Request Forgery via a forged Origin HTTP header processed by the Observability AI Assistant. Affected Versions: 8…

---

## [How can I modify the path Elasticsearch 2.4.6 uses to run Java in Linux?](https://discuss.elastic.co/t/how-can-i-modify-the-path-elasticsearch-2-4-6-uses-to-run-java-in-linux/335893)

<div class="topic-metadata">

**Author:** [@Latitude](https://discuss.elastic.co/u/Latitude)\
**Replies:** 4\
**Last updated:** [June 16, 2023, 7:59pm UTC](https://discuss.elastic.co/t/how-can-i-modify-the-path-elasticsearch-2-4-6-uses-to-run-java-in-linux/335893 "2023-06-16T19:59:31Z")

</div>

Brand new to Elasticsearch. Can anyone explain how how to modify the path Elasticsearch v2.4.6 uses for Java on Linux? There is a discrepancy between Test and Production and I need to change Test to match Production: Pr…

---

## [How to aggregate consecutive "same" logs in Elasticsearch/Kibana?](https://discuss.elastic.co/t/how-to-aggregate-consecutive-same-logs-in-elasticsearch-kibana/285181)

<div class="topic-metadata">

**Author:** [@piglovesyou1](https://discuss.elastic.co/u/piglovesyou1)\
**Replies:** 4\
**Last updated:** [October 1, 2021, 2:40am UTC](https://discuss.elastic.co/t/how-to-aggregate-consecutive-same-logs-in-elasticsearch-kibana/285181 "2021-10-01T02:40:59Z")

</div>

Hi. I currently have data looking like these. // Input { user: "A", status: "away", timestamp: 1 } { user: "A", status: "away", timestamp: 2 } { user: "B", status: "active", timestamp: 3 } { user: "A", status: "away", t…

---

## [Elasticsearch data transfer and queries are very slow](https://discuss.elastic.co/t/elasticsearch-data-transfer-and-queries-are-very-slow/260420)

<div class="topic-metadata">

**Author:** [@RusseL](https://discuss.elastic.co/u/RusseL)\
**Replies:** 4\
**Last updated:** [January 11, 2021, 9:19am UTC](https://discuss.elastic.co/t/elasticsearch-data-transfer-and-queries-are-very-slow/260420 "2021-01-11T09:19:56Z")

</div>

Elasticsearch, queries and data transfer are very slow and I am getting timeout errors. I found this information in the log files of the data nodes. Elasticsearch and Kibana version 7.4.2 I have 13 nodes (3 master ,10 …

---

## [Correct Sizing and compression on Elasticsearch](https://discuss.elastic.co/t/correct-sizing-and-compression-on-elasticsearch/255349)

<div class="topic-metadata">

**Author:** [@xziten](https://discuss.elastic.co/u/xziten)\
**Replies:** 4\
**Last updated:** [November 13, 2020, 8:54pm UTC](https://discuss.elastic.co/t/correct-sizing-and-compression-on-elasticsearch/255349 "2020-11-13T20:54:36Z")

</div>

Hi, I am trying to get some ratio about Elasticsearch cluster. I have this base : \*\*For 100 Gb of raw data / day :\*\* \* 110 Gb of data are indexed (~ +10% for datatype) \* 220 Gb with 1 replica \* 6600 Gb per month \* +…

---

## [Encrypting traffic between browser and kibana](https://discuss.elastic.co/t/encrypting-traffic-between-browser-and-kibana/250569)

<div class="topic-metadata">

**Author:** [@Joe\_Monaco](https://discuss.elastic.co/u/Joe_Monaco)\
**Replies:** 4\
**Last updated:** [October 1, 2020, 11:34am UTC](https://discuss.elastic.co/t/encrypting-traffic-between-browser-and-kibana/250569 "2020-10-01T11:34:19Z")

</div>

https://www.elastic.co/guide/en/kibana/current/configuring-tls.html provides steps to enable encryption between browser and kibana. Following these instructions on a 7.9.2 instance and using a server certificate/private…

---

## [How to disable monitoring and dev tools tab for Kibana custom user?](https://discuss.elastic.co/t/how-to-disable-monitoring-and-dev-tools-tab-for-kibana-custom-user/190689)

<div class="topic-metadata">

**Author:** [@sunilmchaudhari](https://discuss.elastic.co/u/sunilmchaudhari)\
**Replies:** 4\
**Last updated:** [August 20, 2019, 11:18am UTC](https://discuss.elastic.co/t/how-to-disable-monitoring-and-dev-tools-tab-for-kibana-custom-user/190689 "2019-08-20T11:18:44Z")

</div>

Hi, I have created one user in kibana-5.6. Custome role: cbgmelk1\_role User: cbgmelk1user Above user is able to see monitoring, dev tools, management, and other tools. I want that user to see only discover tab. …

---

## [Openshift Elastic Search Logging Spam (1b+ logs a month)](https://discuss.elastic.co/t/openshift-elastic-search-logging-spam-1b-logs-a-month/108882)

<div class="topic-metadata">

**Author:** [@rmarcand](https://discuss.elastic.co/u/rmarcand)\
**Replies:** 4\
**Last updated:** [November 23, 2017, 3:53pm UTC](https://discuss.elastic.co/t/openshift-elastic-search-logging-spam-1b-logs-a-month/108882 "2017-11-23T15:53:44Z")

</div>

The elasticshearch inside openshift origin is generating 25 million hits per day in the operations area (42 million overall), causing a high volume of logs between kibana and Splunk. When did you start to notice this is…

---

## [Can I set maximum backlog retention?](https://discuss.elastic.co/t/can-i-set-maximum-backlog-retention/29609)

<div class="topic-metadata">

**Author:** [@Sam\_Saffron](https://discuss.elastic.co/u/Sam_Saffron)\
**Replies:** 4\
**Last updated:** [September 20, 2015, 4:28am UTC](https://discuss.elastic.co/t/can-i-set-maximum-backlog-retention/29609 "2015-09-20T04:28:37Z")

</div>

Is there a way to configure logstash forwarder so it only retains say 5 minutes of logs if it is unable to transmit stuff to logstash? (cause it is stopped or what not)

---

## [Kibana V6.4.x contols parent control does not work as expected](https://discuss.elastic.co/t/kibana-v6-4-x-contols-parent-control-does-not-work-as-expected/155485)

<div class="topic-metadata">

**Author:** [@guanghaofan](https://discuss.elastic.co/u/guanghaofan)\
**Replies:** 6\
**Last updated:** [November 23, 2018, 5:15am UTC](https://discuss.elastic.co/t/kibana-v6-4-x-contols-parent-control-does-not-work-as-expected/155485 "2018-11-23T05:15:32Z")

</div>

Kibana version V6.4.2 Firfox latest version. I setup a FileName options, and then setup a LotNumber options whose parent is the FileName. while I change the FileName drop down list, and apply the changes, the LotNumbe…

---

## [Lucene to Kuery](https://discuss.elastic.co/t/lucene-to-kuery/148457)

<div class="topic-metadata">

**Author:** [@herve](https://discuss.elastic.co/u/herve)\
**Replies:** 6\
**Last updated:** [September 13, 2018, 6:42pm UTC](https://discuss.elastic.co/t/lucene-to-kuery/148457 "2018-09-13T18:42:25Z")

</div>

Hi, I'm trying the Kuery language in Kibana 6.3.1 but there's a few things I wasn't able to achieve. I can't find a way to query data with a space and a wildcard, like this lucene query: nginx.access.user\_agent.os:Mac…

---

## [SSL Communication Client and Cluster Error](https://discuss.elastic.co/t/ssl-communication-client-and-cluster-error/120607)

<div class="topic-metadata">

**Author:** [@vigneshaj](https://discuss.elastic.co/u/vigneshaj)\
**Replies:** 6\
**Last updated:** [February 22, 2018, 5:09am UTC](https://discuss.elastic.co/t/ssl-communication-client-and-cluster-error/120607 "2018-02-22T05:09:36Z")

</div>

I have a cluster with 2 nodes one master and one data. Elastic with x-pack has been installed. Authentication LDAP is setup Internode communication has been encrypted, which is again successful. Successful: xpack.se…

---

## [Confused about why scroll api doesn't seem to function](https://discuss.elastic.co/t/confused-about-why-scroll-api-doesnt-seem-to-function/63327)

<div class="topic-metadata">

**Author:** [@timford2015](https://discuss.elastic.co/u/timford2015)\
**Replies:** 6\
**Last updated:** [October 19, 2016, 9:20pm UTC](https://discuss.elastic.co/t/confused-about-why-scroll-api-doesnt-seem-to-function/63327 "2016-10-19T21:20:43Z")

</div>

curl 'http://localhost:9200/\<index\>/\<type\>/\_search?scroll=1m' -H 'content-type: application/json;charset=UTF-8' -H 'accept: application/json' --data-binary '{"query":{"match\_all":{}},"sort":\["\_doc"\],"size":100}' --comp…

---

## [Winlogbeat and Windows Event Fowarder (WEF) Wrong Hostname](https://discuss.elastic.co/t/winlogbeat-and-windows-event-fowarder-wef-wrong-hostname/218808)

<div class="topic-metadata">

**Author:** [@SeekAndDestroy](https://discuss.elastic.co/u/SeekAndDestroy)\
**Replies:** 2\
**Last updated:** [February 18, 2020, 2:56pm UTC](https://discuss.elastic.co/t/winlogbeat-and-windows-event-fowarder-wef-wrong-hostname/218808 "2020-02-18T14:56:15Z")

</div>

Hi. Last year, I configured Windows Event Forwarding to send 6 Windows Domain Controllers their Security Logs to a centralized server. The server has WinlogBeat reading the forwarded events, and sending them to Elasticse…

---

## [Management/monitoring tabs "rows per page" setting](https://discuss.elastic.co/t/management-monitoring-tabs-rows-per-page-setting/171990)

<div class="topic-metadata">

**Author:** [@raulk89](https://discuss.elastic.co/u/raulk89)\
**Replies:** 2\
**Last updated:** [March 26, 2019, 9:34pm UTC](https://discuss.elastic.co/t/management-monitoring-tabs-rows-per-page-setting/171990 "2019-03-26T21:34:50Z")

</div>

Hi Elastic, kibana 6.6.1 Index management/monitoring pages have this option to list specific number of rows: Is it possible to set this number (rows per page) somewhere in the settings, so that whenever I move back …

---

## [Logstash XML parsing problem](https://discuss.elastic.co/t/logstash-xml-parsing-problem/112678)

<div class="topic-metadata">

**Author:** [@lennart](https://discuss.elastic.co/u/lennart)\
**Replies:** 2\
**Last updated:** [December 21, 2017, 7:32am UTC](https://discuss.elastic.co/t/logstash-xml-parsing-problem/112678 "2017-12-21T07:32:27Z")

</div>

Hello! I've been trying to figure out how to do XML parsing in logstash for almost nine hours in total. There's not that much information about it and several sources are really old and I'm terrible at coming up with the…

---

## [Marvel on remote docker host](https://discuss.elastic.co/t/marvel-on-remote-docker-host/29890)

<div class="topic-metadata">

**Author:** [@nizsheanez](https://discuss.elastic.co/u/nizsheanez)\
**Replies:** 2\
**Last updated:** [September 24, 2015, 6:36am UTC](https://discuss.elastic.co/t/marvel-on-remote-docker-host/29890 "2015-09-24T06:36:28Z")

</div>

Problem in Short: If IP of node changed then Marvel think it's new server. Can i configure Marvel to group nodes by hostname, not by IP? Problem in Long: I have 2 containers elasticsearch and marvel 1-st sending sta…

---

## [Node.JS process metrics like GC not getting captured by APM agent](https://discuss.elastic.co/t/node-js-process-metrics-like-gc-not-getting-captured-by-apm-agent/295344)

<div class="topic-metadata">

**Author:** [@satpreetsn](https://discuss.elastic.co/u/satpreetsn)\
**Replies:** 7\
**Last updated:** [February 11, 2022, 6:48pm UTC](https://discuss.elastic.co/t/node-js-process-metrics-like-gc-not-getting-captured-by-apm-agent/295344 "2022-02-11T18:48:58Z")

</div>

Hey, i have integrated the ELK apm to my Node Js application. I see the request calls, latency, throughput but i do not see any metric related to event loops and GC unlike i can see it incase of Java applications on Kib…

---

## [Can a Java program operate on multiple versions of elasticsearch?](https://discuss.elastic.co/t/can-a-java-program-operate-on-multiple-versions-of-elasticsearch/207265)

<div class="topic-metadata">

**Author:** [@sanjun1995](https://discuss.elastic.co/u/sanjun1995)\
**Replies:** 7\
**Last updated:** [November 11, 2019, 9:20am UTC](https://discuss.elastic.co/t/can-a-java-program-operate-on-multiple-versions-of-elasticsearch/207265 "2019-11-11T09:20:12Z")

</div>

I need to develop an es automation tool. Our company's es cluster has multiple versions. I found that many clients require the corresponding ES version. Currently I can only think of Java indirectly using the curl and…

---

## [X-Pack for Kibana 5.1.2](https://discuss.elastic.co/t/x-pack-for-kibana-5-1-2/80750)

<div class="topic-metadata">

**Author:** [@open\_door8](https://discuss.elastic.co/u/open_door8)\
**Replies:** 7\
**Last updated:** [April 4, 2017, 3:18pm UTC](https://discuss.elastic.co/t/x-pack-for-kibana-5-1-2/80750 "2017-04-04T15:18:37Z")

</div>

Hi, Elastic team I would like to download X-Pack (specifically - Reporting) for using with Kibana 5.1.2 but I did not find it in previous releases. Can you help with that? Thanks, Dmitry

---

## [How to prevent from exiting MapReduce job when an Exception throwed in Elasitcsearch Hadoop](https://discuss.elastic.co/t/how-to-prevent-from-exiting-mapreduce-job-when-an-exception-throwed-in-elasitcsearch-hadoop/43783)

<div class="topic-metadata">

**Author:** [@Brad\_Jungsu\_Heo](https://discuss.elastic.co/u/Brad_Jungsu_Heo)\
**Replies:** 1\
**Last updated:** [March 12, 2016, 2:13pm UTC](https://discuss.elastic.co/t/how-to-prevent-from-exiting-mapreduce-job-when-an-exception-throwed-in-elasitcsearch-hadoop/43783 "2016-03-12T14:13:19Z")

</div>

I'm stuck with an Exception while running MapReduce. I'm using Elasticsearch 2.1 and Elasticsearch Hadoop 2.2.0 My Problem The type of f1 is byte $ curl -XGET http://hostname:9200/index-name/?pretty ... "f1": { …

---

## [Delete Elasticsearch logs](https://discuss.elastic.co/t/delete-elasticsearch-logs/256639)

<div class="topic-metadata">

**Author:** [@hzarrabi](https://discuss.elastic.co/u/hzarrabi)\
**Replies:** 3\
**Last updated:** [November 30, 2020, 12:55am UTC](https://discuss.elastic.co/t/delete-elasticsearch-logs/256639 "2020-11-30T00:55:51Z")

</div>

Hi guys, I would like to delete elasticsearch logs placed in /var/log/elasticsearch older then 7 days. I can not find any parameter in log4j2.properties from ELastic official site. Do you have any idea about it or sho…

---

## [Create new field from existing field using REGEX](https://discuss.elastic.co/t/create-new-field-from-existing-field-using-regex/204709)

<div class="topic-metadata">

**Author:** [@Marta\_Zagrajek](https://discuss.elastic.co/u/Marta_Zagrajek)\
**Replies:** 3\
**Last updated:** [October 24, 2019, 2:19pm UTC](https://discuss.elastic.co/t/create-new-field-from-existing-field-using-regex/204709 "2019-10-24T14:19:46Z")

</div>

I have grok like that from apache logs: grok { match =\> { "message" =\> '%{IP:ip}\\s(%{GREEDYDATA:logname})?\\s(%{GREEDYDATA:remote\_user})?\\s\[%{HTTPDATE:timestamp}\]\\s"%{WORD:metoda}\\s%{NOTSPACE:request}\\s(HTTP/%{NUMBER:…

---

## [異なるログの相関分析を自動化することについて](https://discuss.elastic.co/t/topic/112154)

<div class="topic-metadata">

**Author:** [@Xuan\_Hoang](https://discuss.elastic.co/u/Xuan_Hoang)\
**Replies:** 0\
**Last updated:** [December 18, 2017, 6:07am UTC](https://discuss.elastic.co/t/topic/112154 "2017-12-18T06:07:11Z")

</div>

こんにちは、ホアンです。 セキュリティ情報の管理（SIEMシステム）と可視化に関することを研究しています。 Linuxではelasticsearch-5.5.2、logstash-5.5.2、kibana-5.5.2の三つのツールを使用しています。 複数のログデータの相関分析を自動化することを目的としてELK stackを用いてSIEM構築し、SIEMシステムの有効性を検証する予定です。 そのため、まず、特定の過去のプロキシのロ…

---

## [Stuck with MySQL permission](https://discuss.elastic.co/t/stuck-with-mysql-permission/97594)

<div class="topic-metadata">

**Author:** [@truongdqse03303](https://discuss.elastic.co/u/truongdqse03303)\
**Replies:** 3\
**Last updated:** [September 14, 2017, 4:59pm UTC](https://discuss.elastic.co/t/stuck-with-mysql-permission/97594 "2017-09-14T16:59:50Z")

</div>

Hi experts I'm trying to config my metricbeat to track MySQL server. Here is my config mysql The result kibana collected is I already use the query GRANT ALL ON . to root@'%' IDENTIFIED BY 'pass'; in sql still e…

---

## [Filtering on facet selections](https://discuss.elastic.co/t/filtering-on-facet-selections/50549)

<div class="topic-metadata">

**Author:** [@batmaci](https://discuss.elastic.co/u/batmaci)\
**Replies:** 3\
**Last updated:** [May 30, 2016, 1:16pm UTC](https://discuss.elastic.co/t/filtering-on-facet-selections/50549 "2016-05-30T13:16:50Z")

</div>

I am new in ElasticSearch. So far I could implement the search successfully and also aggregations to build my filter as shown below { "from": 0, "size": 5, "explain": false, "aggs": { "Condition\_aggs"…

---

## [Log rotate introduced blank offset entry in registry](https://discuss.elastic.co/t/log-rotate-introduced-blank-offset-entry-in-registry/50351)

<div class="topic-metadata">

**Author:** [@logilouis](https://discuss.elastic.co/u/logilouis)\
**Replies:** 3\
**Last updated:** [May 19, 2016, 2:37pm UTC](https://discuss.elastic.co/t/log-rotate-introduced-blank-offset-entry-in-registry/50351 "2016-05-19T14:37:39Z")

</div>

Hi, I noticed that when Filebeat detected a log rotation, it will create a new entry in registry. I discovered that the new entry will have blank offset. An example of the rotated log entry from my registry file (I expa…

---

## [Setting Elasticsearch environment Variables](https://discuss.elastic.co/t/setting-elasticsearch-environment-variables/49688)

<div class="topic-metadata">

**Author:** [@Michel\_Laporte](https://discuss.elastic.co/u/Michel_Laporte)\
**Replies:** 3\
**Last updated:** [May 17, 2016, 1:55pm UTC](https://discuss.elastic.co/t/setting-elasticsearch-environment-variables/49688 "2016-05-17T13:55:29Z")

</div>

Hi, Quick Q. How do i parse elasticsearch variables into the YML? I need to put the IP for network.host dynamically for spawned slaves and ive set an environment variable like: ip="$(ifconfig | grep -A 1 'eth0' | t…

---

## [Installing cloud-aws](https://discuss.elastic.co/t/installing-cloud-aws/39372)

<div class="topic-metadata">

**Author:** [@joeb](https://discuss.elastic.co/u/joeb)\
**Replies:** 3\
**Last updated:** [January 16, 2016, 8:10pm UTC](https://discuss.elastic.co/t/installing-cloud-aws/39372 "2016-01-16T20:10:13Z")

</div>

I'm trying to install cloud-aws as an elasticsearch plugin on an ec2 instance using "sudo bin/plugin install cloud-aws", and I am getting a null github url. I think this is because of some ec2 restrictions. Here is the…

---

## [Watching watcher](https://discuss.elastic.co/t/watching-watcher/1002)

<div class="topic-metadata">

**Author:** [@jbaranick](https://discuss.elastic.co/u/jbaranick)\
**Replies:** 3\
**Last updated:** [June 1, 2015, 9:00pm UTC](https://discuss.elastic.co/t/watching-watcher/1002 "2015-06-01T21:00:24Z")

</div>

It would be nice to be able to configure watches to alert when the queries fail to return within a configured timeout. The default timeout could be the schedule duration. This protects against long running queries caus…

---

## [Store only index without a way to retrieve the actual indexed data](https://discuss.elastic.co/t/store-only-index-without-a-way-to-retrieve-the-actual-indexed-data/180998)

<div class="topic-metadata">

**Author:** [@Yaniv\_Hakim](https://discuss.elastic.co/u/Yaniv_Hakim)\
**Replies:** 1\
**Last updated:** [May 17, 2019, 3:46pm UTC](https://discuss.elastic.co/t/store-only-index-without-a-way-to-retrieve-the-actual-indexed-data/180998 "2019-05-17T15:46:46Z")

</div>

Hi everyone, We're thinking to add elastic to our product stack and we want to use it as a full text search solution and aggregations. The problem is our data is very sensitive and our main data store is AWS MySQL RDS …

[Previous page](https://discuss.elastic.co/top.md?page=1219&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1221&per_page=50&period=all)
