# Top **URL:** https://discuss.elastic.co/top.md?page=1233&period=all [Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md) **Page:** 1234 --- ## [Long period of querying failure during node timeout](https://discuss.elastic.co/t/long-period-of-querying-failure-during-node-timeout/228442)
**Author:** [@rsk0](https://discuss.elastic.co/u/rsk0)\ **Replies:** 3\ **Last updated:** [April 17, 2020, 8:36am UTC](https://discuss.elastic.co/t/long-period-of-querying-failure-during-node-timeout/228442 "2020-04-17T08:36:54Z")
I've got a large 5.6.3 cluster with a couple high-query-rate (low update rate) indices spread evenly across the nodes. We had a node freeze up (VM paused during unplanned hypervisor restart) which correlated with a larg… --- ## [ELK not working after upgrading from v6.7 to v7.1](https://discuss.elastic.co/t/elk-not-working-after-upgrading-from-v6-7-to-v7-1/185659)
**Author:** [@abdulsofts](https://discuss.elastic.co/u/abdulsofts)\ **Replies:** 3\ **Last updated:** [June 14, 2019, 5:58am UTC](https://discuss.elastic.co/t/elk-not-working-after-upgrading-from-v6-7-to-v7-1/185659 "2019-06-14T05:58:36Z")
Hello, Recently I have upgraded my ELK stack setup from 6.7 to 7.1 and verified that the versions of kibana, elasticsearch and logstash are up to date. Problem: After upgrading to v7.1, I am unable to open kibana page… --- ## [Start Elasticsearch in a Java process](https://discuss.elastic.co/t/start-elasticsearch-in-a-java-process/160283)
**Author:** [@jun.li](https://discuss.elastic.co/u/jun.li)\ **Replies:** 3\ **Last updated:** [December 11, 2018, 7:28am UTC](https://discuss.elastic.co/t/start-elasticsearch-in-a-java-process/160283 "2018-12-11T07:28:33Z")
Is it possible I can start/stop Elasticsearch within a Java process? The firm has an infra that can quickly manage any Java process start/stop and also monitor log. org.elasticsearch.client.Node node = new Node(...) n… --- ## [Can I use conditional logic to filter log lines with filebeat?](https://discuss.elastic.co/t/can-i-use-conditional-logic-to-filter-log-lines-with-filebeat/82791)
**Author:** [@red888](https://discuss.elastic.co/u/red888)\ **Replies:** 3\ **Last updated:** [April 24, 2017, 7:35am UTC](https://discuss.elastic.co/t/can-i-use-conditional-logic-to-filter-log-lines-with-filebeat/82791 "2017-04-24T07:35:31Z")
I previously asked how I could send only a sample of my logs with filebeat: https://discuss.elastic.co/t/ship-only-a-percentage-of-logs-to-logstash/77393 Im filtering iis request logs and the volume is very high, i wan… --- ## [How tcp input add fields?](https://discuss.elastic.co/t/how-tcp-input-add-fields/48164)
**Author:** [@iyaozhen](https://discuss.elastic.co/u/iyaozhen)\ **Replies:** 3\ **Last updated:** [April 25, 2016, 4:00am UTC](https://discuss.elastic.co/t/how-tcp-input-add-fields/48164 "2016-04-25T04:00:34Z")
I use python tail log file, and publish to logstash(tcp input). Because my system problem(#46708), I can't use filebeat, and filebeat have a very useful setting fields. How can I achieve this features by python. --- ## [Cluster node roles changed after rolling upgrade](https://discuss.elastic.co/t/cluster-node-roles-changed-after-rolling-upgrade/272685)
**Author:** [@Pyppe](https://discuss.elastic.co/u/Pyppe)\ **Replies:** 1\ **Last updated:** [May 11, 2021, 11:05pm UTC](https://discuss.elastic.co/t/cluster-node-roles-changed-after-rolling-upgrade/272685 "2021-05-11T23:05:23Z")
Hi! We did a rolling upgrade from version 7.6.1 to 7.12.1 as documented in Rolling upgrades | Elasticsearch Guide \[7.12\] | Elastic. We have three nodes in our cluster. Before the upgrade each node had roles dilm, but af… --- ## [Sort on specific keyword in Discover using KQL](https://discuss.elastic.co/t/sort-on-specific-keyword-in-discover-using-kql/259948)
**Author:** [@dontask](https://discuss.elastic.co/u/dontask)\ **Replies:** 1\ **Last updated:** [December 31, 2020, 6:12pm UTC](https://discuss.elastic.co/t/sort-on-specific-keyword-in-discover-using-kql/259948 "2020-12-31T18:12:04Z")
Hello, I would like to sort on a specific (ascending / descending) on a column matching a specific keyword. The column is returning OK or ERROR and I would like the ERROR to be on top instead of the OK, but I still wan… --- ## [Elasticsearch - authorization / certificates and change of IP \[?\]](https://discuss.elastic.co/t/elasticsearch-authorization-certificates-and-change-of-ip/214709)
**Author:** [@Rysiu](https://discuss.elastic.co/u/Rysiu)\ **Replies:** 1\ **Last updated:** [January 12, 2020, 6:29pm UTC](https://discuss.elastic.co/t/elasticsearch-authorization-certificates-and-change-of-ip/214709 "2020-01-12T18:29:10Z")
If I have generated the certificates and set the specified addressing on the Elasticsearch nodes after the change of IP addressing will the certificates and authorization work without problems? Certificates were generat… --- ## [Sort Alphabetically Ignoring Numbers & Special Characters](https://discuss.elastic.co/t/sort-alphabetically-ignoring-numbers-special-characters/161712)
**Author:** [@shoutadnan](https://discuss.elastic.co/u/shoutadnan)\ **Replies:** 1\ **Last updated:** [December 20, 2018, 3:23pm UTC](https://discuss.elastic.co/t/sort-alphabetically-ignoring-numbers-special-characters/161712 "2018-12-20T15:23:41Z")
How to sort a text field alphabetically, ignoring the special characters & numbers? By default, the special characters come first followed by numbers and alphabets. What I need is alphabets should be sorted and appear f… --- ## [Import dashboard and visualization objects using a script](https://discuss.elastic.co/t/import-dashboard-and-visualization-objects-using-a-script/84962)
**Author:** [@andypark](https://discuss.elastic.co/u/andypark)\ **Replies:** 1\ **Last updated:** [May 8, 2017, 6:31pm UTC](https://discuss.elastic.co/t/import-dashboard-and-visualization-objects-using-a-script/84962 "2017-05-08T18:31:59Z")
Hi guys, I am working on automated scripts for setting up and running the elastic stack tools for our log analysis purpose within my company. One thing that I could not create a script for was to import dashboard and v… --- ## [Un invité surprise "please\_read"!](https://discuss.elastic.co/t/un-invite-surprise-please-read/71558)
**Author:** [@Fnizou](https://discuss.elastic.co/u/Fnizou)\ **Replies:** 1\ **Last updated:** [January 13, 2017, 6:38pm UTC](https://discuss.elastic.co/t/un-invite-surprise-please-read/71558 "2017-01-13T18:38:32Z")
Sur mon serveur non sécurisé en phase de test avec ES 2., à ma grande surprise mon index a été supprimé et remplacé par celui-ci : please\_read avec 1 enregistrement qui dit : "Info": "Your DB is Backed up at… --- ## [How to curl elastic or kibana api for alerts?](https://discuss.elastic.co/t/how-to-curl-elastic-or-kibana-api-for-alerts/314455)
**Author:** [@learningelastic](https://discuss.elastic.co/u/learningelastic)\ **Replies:** 2\ **Last updated:** [September 22, 2022, 3:11pm UTC](https://discuss.elastic.co/t/how-to-curl-elastic-or-kibana-api-for-alerts/314455 "2022-09-22T15:11:35Z")
I am learning to use the ELK stack. Both kibana and elasticsearch are installed on my localhost. I just learnt how to install metricbeat and how to set up alerts. When setting up the alerts, I used the index connector… --- ## [Elastic-operator-0 CrashLoopBackOff](https://discuss.elastic.co/t/elastic-operator-0-crashloopbackoff/267736)
**Author:** [@SnakeByte](https://discuss.elastic.co/u/SnakeByte)\ **Replies:** 2\ **Last updated:** [March 23, 2021, 1:30am UTC](https://discuss.elastic.co/t/elastic-operator-0-crashloopbackoff/267736 "2021-03-23T01:30:42Z")
Following the instructions here, I only got as far as step 2 before running into trouble :slight\_smile: : Deploy ECK in your Kubernetes cluster elastic-operator-0 is left in a CrashLoogBackOff state, with these three l… --- ## [Can we have alias to cluster ID in the URL?](https://discuss.elastic.co/t/can-we-have-alias-to-cluster-id-in-the-url/125474)
**Author:** [@D.J](https://discuss.elastic.co/u/D.J)\ **Replies:** 2\ **Last updated:** [March 31, 2018, 9:50am UTC](https://discuss.elastic.co/t/can-we-have-alias-to-cluster-id-in-the-url/125474 "2018-03-31T09:50:32Z")
Hi, we have setup a wildcard dns to the proxy endpoints. but still , must all client connect to something like http://eb1f0e8c82dc4425b32250fb5b3d0ec5.... ?? and for Kibana we must use something different ? can w… --- ## [Kibana won't run after disabling security](https://discuss.elastic.co/t/kibana-wont-run-after-disabling-security/104567)
**Author:** [@TimWard](https://discuss.elastic.co/u/TimWard)\ **Replies:** 2\ **Last updated:** [October 20, 2017, 10:25am UTC](https://discuss.elastic.co/t/kibana-wont-run-after-disabling-security/104567 "2017-10-20T10:25:43Z")
Xpack licence expired, Kibana login message said to disable security. I found some instructions saying to add xpack.security.enabled: false to kibana.yml. On restarting kibana I get the following in the log every few… --- ## [Are there solution to build files report (pdf,excel,.....) in kibana](https://discuss.elastic.co/t/are-there-solution-to-build-files-report-pdf-excel-in-kibana/43879)
**Author:** [@Diyal](https://discuss.elastic.co/u/Diyal)\ **Replies:** 2\ **Last updated:** [March 10, 2016, 10:40am UTC](https://discuss.elastic.co/t/are-there-solution-to-build-files-report-pdf-excel-in-kibana/43879 "2016-03-10T10:40:31Z")
Hi all, I saw that to build files report we can use "Skedler", but it's not free \[:frowning:\] . So are there other alternative to make this ? Thanks --- ## [Dynamic mapping setting not honoured](https://discuss.elastic.co/t/dynamic-mapping-setting-not-honoured/262551)
**Author:** [@DavidoffX](https://discuss.elastic.co/u/DavidoffX)\ **Replies:** 1\ **Last updated:** [January 31, 2021, 7:32pm UTC](https://discuss.elastic.co/t/dynamic-mapping-setting-not-honoured/262551 "2021-01-31T19:32:24Z")
If I create new index with a mapping definition eg. { "mappings": { "dynamic": "false", "properties": { ...} } } and then send data to it with fields that aren't included in the mapping, they ar… --- ## [Hey i want to add some text into my message can anybody help me how to do it?](https://discuss.elastic.co/t/hey-i-want-to-add-some-text-into-my-message-can-anybody-help-me-how-to-do-it/260321)
**Author:** [@jolaniya](https://discuss.elastic.co/u/jolaniya)\ **Replies:** 4\ **Last updated:** [January 13, 2021, 8:51am UTC](https://discuss.elastic.co/t/hey-i-want-to-add-some-text-into-my-message-can-anybody-help-me-how-to-do-it/260321 "2021-01-13T08:51:23Z")
Hey i want to add some text into my message can anybody help me how to do it? --- ## [Watcher Alerting on multi-bucket anomaly?](https://discuss.elastic.co/t/watcher-alerting-on-multi-bucket-anomaly/256911)
**Author:** [@Incauto](https://discuss.elastic.co/u/Incauto)\ **Replies:** 1\ **Last updated:** [November 30, 2020, 12:11pm UTC](https://discuss.elastic.co/t/watcher-alerting-on-multi-bucket-anomaly/256911 "2020-11-30T12:11:52Z")
Its posible to alert only on multi-bucket anomalies? can you direct me to some examples please? thanks --- ## [Get Distinct value in Elastic App Search](https://discuss.elastic.co/t/get-distinct-value-in-elastic-app-search/245291)
**Author:** [@DILIP\_SHARMA](https://discuss.elastic.co/u/DILIP_SHARMA)\ **Replies:** 4\ **Last updated:** [August 18, 2020, 5:58pm UTC](https://discuss.elastic.co/t/get-distinct-value-in-elastic-app-search/245291 "2020-08-18T17:58:23Z")
Hi i am using Elastic Enterprise Search for searching document , where i have requirement where i want to get distinct value of 1 field - for example i want to get distinct brand name available in my engine . this is… --- ## [Active Directory Authentication for ES and Kibana](https://discuss.elastic.co/t/active-directory-authentication-for-es-and-kibana/224690)
**Author:** [@moscha](https://discuss.elastic.co/u/moscha)\ **Replies:** 4\ **Last updated:** [March 25, 2020, 9:13am UTC](https://discuss.elastic.co/t/active-directory-authentication-for-es-and-kibana/224690 "2020-03-25T09:13:04Z")
Hello. Firstly I would like to apologize if this is the wrong section, but reading through the various older topics it seems that the process of logging to Kibana via AD is managed via ES so you need to configure ES corr… --- ## [Filter by comparing two number fields fails with number\_format\_exception](https://discuss.elastic.co/t/filter-by-comparing-two-number-fields-fails-with-number-format-exception/222250)
**Author:** [@ismarslomic](https://discuss.elastic.co/u/ismarslomic)\ **Replies:** 4\ **Last updated:** [March 6, 2020, 10:58am UTC](https://discuss.elastic.co/t/filter-by-comparing-two-number-fields-fails-with-number-format-exception/222250 "2020-03-06T10:58:53Z")
I would like to filter documents in Kibana Visualize where msg.count\_passenger\_out \> msg.count\_passenger\_in. Both fields are number fields and are indexed. Im running Kibana + Elasticsearch v7.6.0 at Elastic Cloud. Thi… --- ## [\_type is indexed but NOT stored. What does this mean?](https://discuss.elastic.co/t/-type-is-indexed-but-not-stored-what-does-this-mean/99224)
**Author:** [@vamsyr](https://discuss.elastic.co/u/vamsyr)\ **Replies:** 4\ **Last updated:** [September 5, 2017, 3:50am UTC](https://discuss.elastic.co/t/-type-is-indexed-but-not-stored-what-does-this-mean/99224 "2017-09-05T03:50:27Z")
I understood that in elastic, indexing means making it searchable. I am confused at the point - indexed but not stored? After indexing and NOT storing, how can we search the one that is not stored? If we search such one… --- ## [What is expected behaviour when indexing with same ID, different parent](https://discuss.elastic.co/t/what-is-expected-behaviour-when-indexing-with-same-id-different-parent/80320)
**Author:** [@ddeath](https://discuss.elastic.co/u/ddeath)\ **Replies:** 4\ **Last updated:** [March 28, 2017, 8:48pm UTC](https://discuss.elastic.co/t/what-is-expected-behaviour-when-indexing-with-same-id-different-parent/80320 "2017-03-28T20:48:50Z")
Hi there, I would like to ask what is expected behaviour when I will index with the same ID but different parent multiple times? For example: PUT /tests/a/50?parent=25 { "item": "C" } PUT /tests/a/50?parent=26 {… --- ## [Catch 404 error from output plugin and then write back to log file](https://discuss.elastic.co/t/catch-404-error-from-output-plugin-and-then-write-back-to-log-file/27640)
**Author:** [@crickeys](https://discuss.elastic.co/u/crickeys)\ **Replies:** 1\ **Last updated:** [September 12, 2016, 1:25pm UTC](https://discuss.elastic.co/t/catch-404-error-from-output-plugin-and-then-write-back-to-log-file/27640 "2016-09-12T13:25:47Z")
Is there any way to catch this failed action with response of 404, dropping action: from an output plugin and then re-write it into the log or retry it again in a bit instead of dropping it? --- ## [How to read excel file and push data into elasticsearch](https://discuss.elastic.co/t/how-to-read-excel-file-and-push-data-into-elasticsearch/100644)
**Author:** [@ajit](https://discuss.elastic.co/u/ajit)\ **Replies:** 0\ **Last updated:** [September 15, 2017, 6:32am UTC](https://discuss.elastic.co/t/how-to-read-excel-file-and-push-data-into-elasticsearch/100644 "2017-09-15T06:32:14Z")
I have implemented below solution but it is taking long time to push all data to elasticsearch. I have created hashmap and I am reading file row wise. I want column name as key and respective row as value in hashmap. If… --- ## [Elastic Cloud and Filebeat setup](https://discuss.elastic.co/t/elastic-cloud-and-filebeat-setup/285927)
**Author:** [@Sakshee](https://discuss.elastic.co/u/Sakshee)\ **Replies:** 7\ **Last updated:** [October 22, 2021, 2:51pm UTC](https://discuss.elastic.co/t/elastic-cloud-and-filebeat-setup/285927 "2021-10-22T14:51:44Z")
Hello All, I am trying to send cloud Watch logs from a filebeat server to Elastic Cloud. I am getting following warnings. And not able to see any logs on Elastic cloud Kibana. Logs from Filebeat: 2021-10-05T12:56:… --- ## [Bucket Terms aggregation, top 20 values](https://discuss.elastic.co/t/bucket-terms-aggregation-top-20-values/259031)
**Author:** [@grra](https://discuss.elastic.co/u/grra)\ **Replies:** 7\ **Last updated:** [December 24, 2020, 11:09am UTC](https://discuss.elastic.co/t/bucket-terms-aggregation-top-20-values/259031 "2020-12-24T11:09:47Z")
Hi, on my Buckets I have the Terms aggregation, with a field of the type number. I need the 20 biggest values of that field - in ascending order. Is it possible to order the Terms ascending and then take the last 20 … --- ## [Adding tags to logs](https://discuss.elastic.co/t/adding-tags-to-logs/94545)
**Author:** [@ashvita](https://discuss.elastic.co/u/ashvita)\ **Replies:** 7\ **Last updated:** [August 3, 2017, 8:30pm UTC](https://discuss.elastic.co/t/adding-tags-to-logs/94545 "2017-08-03T20:30:55Z")
Hi, I want to add tags to my incoming logs. Below is the snippet of the log- 10.100.213.171 Jul 25 22:02:42 x86-hw user.info Cmog: 4884:UpgradeActor D {\[4 04:01:52\] DbUtil.cpp:805}\[-4052732736\]::\[StartIcsClient\]::dom… --- ## [Logstash Filters](https://discuss.elastic.co/t/logstash-filters/25203)
**Author:** [@abathula](https://discuss.elastic.co/u/abathula)\ **Replies:** 7\ **Last updated:** [July 9, 2015, 10:05am UTC](https://discuss.elastic.co/t/logstash-filters/25203 "2015-07-09T10:05:19Z")
Hi Good morning, I have a requirement of creating a filter in logstash which is displayed as a field in kibana also. if any (Exception or IOException or NullPointerException) in message, then create a field called ms… --- ## [Failed to parse mapping \[\_doc\]: properties must be a map type](https://discuss.elastic.co/t/failed-to-parse-mapping-doc-properties-must-be-a-map-type/263103)
**Author:** [@coudenysj](https://discuss.elastic.co/u/coudenysj)\ **Replies:** 1\ **Last updated:** [February 24, 2021, 12:35pm UTC](https://discuss.elastic.co/t/failed-to-parse-mapping-doc-properties-must-be-a-map-type/263103 "2021-02-24T12:35:56Z")
I'm trying to update the routing allocation of index templates, but with the new 7.10 release, I get strange errors. For the other version, I just GET the index template, alter the routing key, and PUT it back to the AP… --- ## [JAVA License change](https://discuss.elastic.co/t/java-license-change/191633)
**Author:** [@mmarzec](https://discuss.elastic.co/u/mmarzec)\ **Replies:** 1\ **Last updated:** [July 26, 2019, 5:22pm UTC](https://discuss.elastic.co/t/java-license-change/191633 "2019-07-26T17:22:59Z")
We have a question about java license change. Is there any impact on elastic search component? https://www.oracle.com/technetwork/java/javase/downloads/server-jre8-downloads-2133154.html --- ## [How to use slop and minimum\_should\_match together in some query?](https://discuss.elastic.co/t/how-to-use-slop-and-minimum-should-match-together-in-some-query/190352)
**Author:** [@princesahu04](https://discuss.elastic.co/u/princesahu04)\ **Replies:** 1\ **Last updated:** [July 20, 2019, 8:40pm UTC](https://discuss.elastic.co/t/how-to-use-slop-and-minimum-should-match-together-in-some-query/190352 "2019-07-20T20:40:28Z")
Basically, my objective is to search for some sentences with slope and also with minimum\_should\_match. For example: \> GET my\_index/\_search \> { \> "query": { \> "field": "provided that immediately after giving effec… --- ## [Help me increase index.max\_result\_window level](https://discuss.elastic.co/t/help-me-increase-index-max-result-window-level/139610)
**Author:** [@marklcfc](https://discuss.elastic.co/u/marklcfc)\ **Replies:** 1\ **Last updated:** [July 11, 2018, 3:53pm UTC](https://discuss.elastic.co/t/help-me-increase-index-max-result-window-level/139610 "2018-07-11T15:53:58Z")
I am trying to use ElasticSearch on Invision forum software, it works generally but there is an error and its causing tasks to crash. This is the error Result window is too large, from + size must be less than or equal … --- ## [Nginx config for reverse proxying Kibana 5.1.1](https://discuss.elastic.co/t/nginx-config-for-reverse-proxying-kibana-5-1-1/88051)
**Author:** [@Ramya](https://discuss.elastic.co/u/Ramya)\ **Replies:** 1\ **Last updated:** [June 6, 2017, 2:21pm UTC](https://discuss.elastic.co/t/nginx-config-for-reverse-proxying-kibana-5-1-1/88051 "2017-06-06T14:21:57Z")
I am newbie to Nginx and reverse proxy I am struggling to make accessing of kibana through Nginx work with latest versions of Kibana Kibana 5.1.1 This is current config server { listen 8070; location ~… --- ## [Dissect Debugger coming in the future?](https://discuss.elastic.co/t/dissect-debugger-coming-in-the-future/66678)
**Author:** [@german23](https://discuss.elastic.co/u/german23)\ **Replies:** 1\ **Last updated:** [November 21, 2016, 7:32am UTC](https://discuss.elastic.co/t/dissect-debugger-coming-in-the-future/66678 "2016-11-21T07:32:27Z")
Hi folks, as i read the post on the elastic homepage about the new dissect filter and its advantages in performance over grok in some cases, i really want to start playing with it. As many of u know there is a grok d… --- ## [Filebeat redis logstash](https://discuss.elastic.co/t/filebeat-redis-logstash/50671)
**Author:** [@Sandhya\_Rathinapandi](https://discuss.elastic.co/u/Sandhya_Rathinapandi)\ **Replies:** 1\ **Last updated:** [May 23, 2016, 10:23am UTC](https://discuss.elastic.co/t/filebeat-redis-logstash/50671 "2016-05-23T10:23:58Z")
Hi We are trying to configure Filebeat-\> redis-\> logstash-\> elasticsearch. But getting the following error. Redis connection problem {:exception=\>#\ **Author:** [@carmine.fabrizio](https://discuss.elastic.co/u/carmine.fabrizio)\ **Replies:** 6\ **Last updated:** [March 12, 2020, 5:42pm UTC](https://discuss.elastic.co/t/metricbeat-on-nginx-reads-only-access-log-and-error-log/223300 "2020-03-12T17:42:56Z") Hi all, I'm having a strange behavior, my metricbeat is reading only /var/log/nginx/access.log /var/log/nginx/error.log I have different .log file per each location on my NGINX. this is what I configured in my /etc… --- ## [About the time spent when output to elasticsearch](https://discuss.elastic.co/t/about-the-time-spent-when-output-to-elasticsearch/143290)
**Author:** [@cythwell](https://discuss.elastic.co/u/cythwell)\ **Replies:** 6\ **Last updated:** [August 8, 2018, 7:05am UTC](https://discuss.elastic.co/t/about-the-time-spent-when-output-to-elasticsearch/143290 "2018-08-08T07:05:34Z")
Hi, I am trying filebeat output to elasticsearch. And have something not clear. And I found that there are almost 7 seconds among filebeat publish to elasticsearch and elasticsearch API can find the doc. (Filebeat jus… --- ## [ELK gathering logs from all Azure regions - is it possible?](https://discuss.elastic.co/t/elk-gathering-logs-from-all-azure-regions-is-it-possible/103983)
**Author:** [@przemolb](https://discuss.elastic.co/u/przemolb)\ **Replies:** 6\ **Last updated:** [November 2, 2017, 9:16pm UTC](https://discuss.elastic.co/t/elk-gathering-logs-from-all-azure-regions-is-it-possible/103983 "2017-11-02T21:16:08Z")
Hi all, we are thinking of deploying ELK stack for our cloud only based company (azure). We are in several Azure regions and would like to have a look at all logs from all these regions. Because in Azure there is no pee… --- ## [\[Metricbeat\] Process modules produces high load / cpu usage](https://discuss.elastic.co/t/metricbeat-process-modules-produces-high-load-cpu-usage/294923)
**Author:** [@adsr](https://discuss.elastic.co/u/adsr)\ **Replies:** 0\ **Last updated:** [January 20, 2022, 9:58am UTC](https://discuss.elastic.co/t/metricbeat-process-modules-produces-high-load-cpu-usage/294923 "2022-01-20T09:58:54Z")
Hi, after upgrading metricbeat from 7.11.2 to 7.16.3 I notice very high load/cpu usage for the metricbeat process. I narrowed it down to the process module in combination with a python process. Furthermore I tried sev… --- ## [ES 7.12 - Java rest high level - multi\_terms aggregation - response error](https://discuss.elastic.co/t/es-7-12-java-rest-high-level-multi-terms-aggregation-response-error/272101)
**Author:** [@hikemachado](https://discuss.elastic.co/u/hikemachado)\ **Replies:** 0\ **Last updated:** [May 4, 2021, 5:57pm UTC](https://discuss.elastic.co/t/es-7-12-java-rest-high-level-multi-terms-aggregation-response-error/272101 "2021-05-04T17:57:01Z")
Hi there, I've a request using SearchTemplateRequest the request script uses "multi\_terms" aggregation I can see in the logs that the response comes as expected but the java rest high level throws an exception saying … --- ## [Elastic search does not work during operation, causing problems in restarting](https://discuss.elastic.co/t/elastic-search-does-not-work-during-operation-causing-problems-in-restarting/324556)
**Author:** [@sramana235](https://discuss.elastic.co/u/sramana235)\ **Replies:** 3\ **Last updated:** [February 3, 2023, 7:22am UTC](https://discuss.elastic.co/t/elastic-search-does-not-work-during-operation-causing-problems-in-restarting/324556 "2023-02-03T07:22:33Z")
\[2023-02-02T18:22:39,230\]\[INFO \]\[o.e.e.NodeEnvironment \] \[name\] using \[1\] data paths, mounts \[\[/data (/dev/data)\]\], net usable\_space \[55.9gb\], net total\_space \[98.4gb\], types \[ext4\] \[2023-02-02T18:22:39,231\]\[INFO \]\[o.… --- ## [Disover without \_source field?](https://discuss.elastic.co/t/disover-without-source-field/311410)
**Author:** [@Dargod](https://discuss.elastic.co/u/Dargod)\ **Replies:** 3\ **Last updated:** [August 15, 2022, 3:00pm UTC](https://discuss.elastic.co/t/disover-without-source-field/311410 "2022-08-15T15:00:30Z")
Is it possible to fully use the section Discover in Kibana with disabled \_source? I disabled this field and set option: Read fields from \_source (discover:searchFieldsFromSource) - False However, I still get the erro… --- ## [How to find the ingest pipeline used to parse for Nginx logs](https://discuss.elastic.co/t/how-to-find-the-ingest-pipeline-used-to-parse-for-nginx-logs/311263)
**Author:** [@Maduranga](https://discuss.elastic.co/u/Maduranga)\ **Replies:** 3\ **Last updated:** [August 4, 2022, 8:26am UTC](https://discuss.elastic.co/t/how-to-find-the-ingest-pipeline-used-to-parse-for-nginx-logs/311263 "2022-08-04T08:26:43Z")
Hi, I am using Elastic cloud to send our Nginx logs using Filebeat Nginx module. However, the Nginx log is not parsed and gives "Provided Grok expressions do not match field value" error. The event.original field that… --- ## [Elasticsearch SQL - Error when using CASE WHEN with SUM aggregate](https://discuss.elastic.co/t/elasticsearch-sql-error-when-using-case-when-with-sum-aggregate/231000)
**Author:** [@Pramod\_Kumar1](https://discuss.elastic.co/u/Pramod_Kumar1)\ **Replies:** 3\ **Last updated:** [May 5, 2020, 9:08am UTC](https://discuss.elastic.co/t/elasticsearch-sql-error-when-using-case-when-with-sum-aggregate/231000 "2020-05-05T09:08:44Z")
Hi Team, I am getting an error in elasticsearch sql(in-built elasticsql within x-pack) query when using CASE WHEN with SUM aggregate function. { "type": "sql\_illegal\_argument\_exception", "reason": "Does not know how to… --- ## [Unexpected Error in Scheduled Task](https://discuss.elastic.co/t/unexpected-error-in-scheduled-task/141914)
**Author:** [@Applesauce](https://discuss.elastic.co/u/Applesauce)\ **Replies:** 0\ **Last updated:** [July 27, 2018, 9:24am UTC](https://discuss.elastic.co/t/unexpected-error-in-scheduled-task/141914 "2018-07-27T09:24:50Z")
Hello. I am running a setup using elasticsearch 5.5.3. We've just migrated from a different server using 2.3.4 and are in the process of getting everything finalized. During this I encountered a parsing error (non-relate… --- ## [Elasticsearch in Sails js](https://discuss.elastic.co/t/elasticsearch-in-sails-js/131679)
**Author:** [@Akash\_Tanwar](https://discuss.elastic.co/u/Akash_Tanwar)\ **Replies:** 3\ **Last updated:** [May 15, 2018, 5:53am UTC](https://discuss.elastic.co/t/elasticsearch-in-sails-js/131679 "2018-05-15T05:53:49Z")
Hi, I am very new to sails js. Can someone please guide me on how to access elastic search in sails js (a particular index) and how to write logic on that particular data on that index. It would be really great if some… --- ## [Elasticsearch responded with a 503 status](https://discuss.elastic.co/t/elasticsearch-responded-with-a-503-status/48416)
**Author:** [@jagan](https://discuss.elastic.co/u/jagan)\ **Replies:** 3\ **Last updated:** [April 28, 2016, 7:18pm UTC](https://discuss.elastic.co/t/elasticsearch-responded-with-a-503-status/48416 "2016-04-28T19:18:23Z")
Hi team, Could you please help me out when i was running the service 'elasticsearch' i get the status as 503 in server while in my local machine it is working fine with status 200 but not in server. What could be the ca… --- ## [Right IPv6 Field,Wrong Visualize Display In Kibana](https://discuss.elastic.co/t/right-ipv6-field-wrong-visualize-display-in-kibana/26625)
**Author:** [@Roger\_Hsu](https://discuss.elastic.co/u/Roger_Hsu)\ **Replies:** 3\ **Last updated:** [August 4, 2015, 5:14am UTC](https://discuss.elastic.co/t/right-ipv6-field-wrong-visualize-display-in-kibana/26625 "2015-08-04T05:14:55Z")
Hi, I'm newbie on ELK Stack and test it about a Month ago. Got a issue with IPv6 field with many colon(:slight\_smile: ,when visualize like this But search this field is right Display full IPv6 string,no separate … [Previous page](https://discuss.elastic.co/top.md?page=1232&per_page=50&period=all) [Next page](https://discuss.elastic.co/top.md?page=1234&per_page=50&period=all)