# Top

**URL:** https://discuss.elastic.co/top.md?page=1269&period=all

[Latest](https://discuss.elastic.co/latest.md) · [Categories](https://discuss.elastic.co/categories.md) · [Tags](https://discuss.elastic.co/tags.md)

**Page:** 1270

---

## [Can't install marvel](https://discuss.elastic.co/t/cant-install-marvel/59786)

<div class="topic-metadata">

**Author:** [@ironbeast](https://discuss.elastic.co/u/ironbeast)\
**Replies:** 2\
**Last updated:** [September 5, 2016, 8:48am UTC](https://discuss.elastic.co/t/cant-install-marvel/59786 "2016-09-05T08:48:41Z")

</div>

Dear all, I'm trying to setup elasticsearch monitoring cluster. So this part is kinda crucial :-). I'm getting the following error when I'm trying to install the plugin. I search google and found a lot about this, but …

---

## [MVEL vs Javascript scripting plugin? Which scripting plugin is recommended for speed?](https://discuss.elastic.co/t/mvel-vs-javascript-scripting-plugin-which-scripting-plugin-is-recommended-for-speed/14614)

<div class="topic-metadata">

**Author:** [@vaidik](https://discuss.elastic.co/u/vaidik)\
**Replies:** 2\
**Last updated:** [November 27, 2013, 12:03pm UTC](https://discuss.elastic.co/t/mvel-vs-javascript-scripting-plugin-which-scripting-plugin-is-recommended-for-speed/14614 "2013-11-27T12:03:39Z")

</div>

Hey folks, In the past few days I have learned that scripts are expensive. I was using scripts in term facets and that would give me horrible performance as compared to using terms facet with forming a term similar …

---

## [How to reduce disk usage for metricbeat](https://discuss.elastic.co/t/how-to-reduce-disk-usage-for-metricbeat/325145)

<div class="topic-metadata">

**Author:** [@Gaurav\_kr](https://discuss.elastic.co/u/Gaurav_kr)\
**Replies:** 5\
**Last updated:** [February 10, 2023, 1:39pm UTC](https://discuss.elastic.co/t/how-to-reduce-disk-usage-for-metricbeat/325145 "2023-02-10T13:39:05Z")

</div>

Hi Team, I am using metricbeat to monitor around 200+ environments, and using system module. But it is comusing lot of disk space daily it use 10 GB of disk space to store the monitor data. Can we do any work to make…

---

## [ELK stack set up - Filebeat setup failing](https://discuss.elastic.co/t/elk-stack-set-up-filebeat-setup-failing/257122)

<div class="topic-metadata">

**Author:** [@Guy\_Goodrick](https://discuss.elastic.co/u/Guy_Goodrick)\
**Replies:** 5\
**Last updated:** [November 30, 2020, 9:54pm UTC](https://discuss.elastic.co/t/elk-stack-set-up-filebeat-setup-failing/257122 "2020-11-30T21:54:51Z")

</div>

Hello - I'm new to this, just getting started installing the ELK stack on Ubuntu 20.04. Everything is running on that one server for now (though eventually we will want to look at a production version with a cluster, but…

---

## [Query connected and seperated words (ie: everybody - every body)](https://discuss.elastic.co/t/query-connected-and-seperated-words-ie-everybody-every-body/245403)

<div class="topic-metadata">

**Author:** [@ziv](https://discuss.elastic.co/u/ziv)\
**Replies:** 5\
**Last updated:** [August 19, 2020, 11:32am UTC](https://discuss.elastic.co/t/query-connected-and-seperated-words-ie-everybody-every-body/245403 "2020-08-19T11:32:04Z")

</div>

I have a document with the following description: "we have a lot of skin care products". and when I'm trying to query with the word "skincare" I get score 0. is there a tokenizer for this case? to treat words like ski…

---

## [Cannot execute scripts using \[field\] context](https://discuss.elastic.co/t/cannot-execute-scripts-using-field-context/198165)

<div class="topic-metadata">

**Author:** [@shadow\_air](https://discuss.elastic.co/u/shadow_air)\
**Replies:** 5\
**Last updated:** [September 18, 2019, 2:47am UTC](https://discuss.elastic.co/t/cannot-execute-scripts-using-field-context/198165 "2019-09-18T02:47:20Z")

</div>

Dear Team When i want to add a new script field by kibana management menu, i got a error, i find the request is looks like this: path: elasticsearch/\_msearch request payload: {"index":"myIndex","ignore\_unavaila…

---

## [Kibana LDAP authentication 6.8.0](https://discuss.elastic.co/t/kibana-ldap-authentication-6-8-0/187113)

<div class="topic-metadata">

**Author:** [@akshay\_singh2](https://discuss.elastic.co/u/akshay_singh2)\
**Replies:** 5\
**Last updated:** [June 25, 2019, 6:38am UTC](https://discuss.elastic.co/t/kibana-ldap-authentication-6-8-0/187113 "2019-06-25T06:38:51Z")

</div>

Hello Team, We are running ELK stack on 6.8 without any LDAP or AD authentication. Now i want to configure LDAP authentication for Kibana. Any help on this will be very appreciated. Thanks Akshay.

---

## [Ingest attachment - new versions in maven](https://discuss.elastic.co/t/ingest-attachment-new-versions-in-maven/86586)

<div class="topic-metadata">

**Author:** [@Vikentyi](https://discuss.elastic.co/u/Vikentyi)\
**Replies:** 5\
**Last updated:** [May 29, 2017, 8:29pm UTC](https://discuss.elastic.co/t/ingest-attachment-new-versions-in-maven/86586 "2017-05-29T20:29:28Z")

</div>

I was using elasticsearch 2.0 and plugin for attachments (mapper-attachments) for it and everything was fine. But now I switched to elastic current version 5.4.0 and have to use new plugin for attachments (ingest-attach…

---

## [Get elasticsearch raw query using API](https://discuss.elastic.co/t/get-elasticsearch-raw-query-using-api/176771)

<div class="topic-metadata">

**Author:** [@Bat-Chen\_Ozeri](https://discuss.elastic.co/u/Bat-Chen_Ozeri)\
**Replies:** 1\
**Last updated:** [April 29, 2019, 8:42am UTC](https://discuss.elastic.co/t/get-elasticsearch-raw-query-using-api/176771 "2019-04-29T08:42:40Z")

</div>

Hi, I'm using version 6.5 and have the following scenario: (tl;dr: I need to get the raw elasticsearch query of saved searches. The exact query that is under inspect -\> request in kibana) In case of downtime in some of…

---

## [Metricbeat dashboards not showing up](https://discuss.elastic.co/t/metricbeat-dashboards-not-showing-up/170302)

<div class="topic-metadata">

**Author:** [@yash\_sachdeva](https://discuss.elastic.co/u/yash_sachdeva)\
**Replies:** 1\
**Last updated:** [February 28, 2019, 7:25pm UTC](https://discuss.elastic.co/t/metricbeat-dashboards-not-showing-up/170302 "2019-02-28T19:25:47Z")

</div>

Hi Team, I have installed metricbeat on kubernetes as per elastic's standard documentation with autodiscover and kube metadata. Even though I can see metricbeat data on the discover page, the metricbeat kubernetes dashb…

---

## [Unable to send data to ES 6.0 using Logstash 6.0](https://discuss.elastic.co/t/unable-to-send-data-to-es-6-0-using-logstash-6-0/109977)

<div class="topic-metadata">

**Author:** [@Pratiksha\_Tewary](https://discuss.elastic.co/u/Pratiksha_Tewary)\
**Replies:** 1\
**Last updated:** [December 5, 2017, 7:32am UTC](https://discuss.elastic.co/t/unable-to-send-data-to-es-6-0-using-logstash-6-0/109977 "2017-12-05T07:32:42Z")

</div>

Hi, I wanted to know if there have been any changes to the Logstash configuration process from the previous versions. I created a mapping in ES 6.0 and wanted to send data to it using Logstash. So, my pipeline was as fo…

---

## [LIRE with elasticsearch](https://discuss.elastic.co/t/lire-with-elasticsearch/68645)

<div class="topic-metadata">

**Author:** [@Navneet\_Mathpal](https://discuss.elastic.co/u/Navneet_Mathpal)\
**Replies:** 1\
**Last updated:** [December 11, 2016, 6:07pm UTC](https://discuss.elastic.co/t/lire-with-elasticsearch/68645 "2016-12-11T18:07:06Z")

</div>

Hi, does elastic 5.0 support latest LIRE(lucene image retrieval engine ) lire ? if yes , is there any same example or projects available ? Thanks, Navneet

---

## [Understanding Sorts and Aggs in Kibana Bar Chart](https://discuss.elastic.co/t/understanding-sorts-and-aggs-in-kibana-bar-chart/36923)

<div class="topic-metadata">

**Author:** [@scottgcurtis](https://discuss.elastic.co/u/scottgcurtis)\
**Replies:** 1\
**Last updated:** [December 29, 2015, 11:13pm UTC](https://discuss.elastic.co/t/understanding-sorts-and-aggs-in-kibana-bar-chart/36923 "2015-12-29T23:13:06Z")

</div>

We've recently begun using ELK for report logs. Previously I have visualized our report usage using Tableau. Attempting to create a similar viz in Kibana, I ran across an interesting feature. We use a viz that shows the…

---

## [Cluster\_block\_exception does not allow me to delete an index](https://discuss.elastic.co/t/cluster-block-exception-does-not-allow-me-to-delete-an-index/324218)

<div class="topic-metadata">

**Author:** [@DarwinGoyal](https://discuss.elastic.co/u/DarwinGoyal)\
**Replies:** 6\
**Last updated:** [January 31, 2023, 7:50am UTC](https://discuss.elastic.co/t/cluster-block-exception-does-not-allow-me-to-delete-an-index/324218 "2023-01-31T07:50:46Z")

</div>

I created one index with "blocks.metadata": true. PUT darwin-test-shard/\_settings { "blocks.metadata": true } Now whenever I try to access \_cat/indices, I get { "error" : { "root\_cause" : \[ { "ty…

---

## [Elastic Agents don't see upgrade available in Kibana](https://discuss.elastic.co/t/elastic-agents-dont-see-upgrade-available-in-kibana/347271)

<div class="topic-metadata">

**Author:** [@aqiank](https://discuss.elastic.co/u/aqiank)\
**Replies:** 6\
**Last updated:** [November 20, 2023, 2:28pm UTC](https://discuss.elastic.co/t/elastic-agents-dont-see-upgrade-available-in-kibana/347271 "2023-11-20T14:28:55Z")

</div>

Hi, My Elastic Agents are currently at 8.11.0 but they don't seem to see that there is 8.11.1 so I am unable to upgrade them using Kibana. It was the same way when they were still at version 8.10.x and version 8.11.0 wa…

---

## [Performance for small index](https://discuss.elastic.co/t/performance-for-small-index/249329)

<div class="topic-metadata">

**Author:** [@Mathmarc](https://discuss.elastic.co/u/Mathmarc)\
**Replies:** 6\
**Last updated:** [September 22, 2020, 5:54am UTC](https://discuss.elastic.co/t/performance-for-small-index/249329 "2020-09-22T05:54:55Z")

</div>

Hi everyone, I have multiple question about the optimization of a cluster with: running on c5.xlarge (4cpu 8GB ram) huge read req/s and small write req/s. small index 20GB to 30GB. experimenting shard between 1GB to …

---

## [Rollover logs indexed daily](https://discuss.elastic.co/t/rollover-logs-indexed-daily/225421)

<div class="topic-metadata">

**Author:** [@hongphuc95](https://discuss.elastic.co/u/hongphuc95)\
**Replies:** 6\
**Last updated:** [March 27, 2020, 4:47pm UTC](https://discuss.elastic.co/t/rollover-logs-indexed-daily/225421 "2020-03-27T16:47:14Z")

</div>

Hello every, I hope you all doing well during this time of confinement So basically what I have is a series of logs indexed daily into Elasticsearch, my logs index pattern is logs-YYYY.MM.DD I'm trying to set up a rol…

---

## [Add new field to index using Logstash getting null values](https://discuss.elastic.co/t/add-new-field-to-index-using-logstash-getting-null-values/167370)

<div class="topic-metadata">

**Author:** [@Miguel\_Plazas](https://discuss.elastic.co/u/Miguel_Plazas)\
**Replies:** 6\
**Last updated:** [February 7, 2019, 10:41pm UTC](https://discuss.elastic.co/t/add-new-field-to-index-using-logstash-getting-null-values/167370 "2019-02-07T22:41:19Z")

</div>

Hi, currently i would like to add a new field gain in a current index based on a field value as follows: input { elasticsearch { hosts =\> "http://localhost:9200" index =\> "my\_index" } } filter { if \[ga…

---

## [Can't update disk space watermarks via API](https://discuss.elastic.co/t/cant-update-disk-space-watermarks-via-api/148793)

<div class="topic-metadata">

**Author:** [@74db36a597f21b891b3f](https://discuss.elastic.co/u/74db36a597f21b891b3f)\
**Replies:** 6\
**Last updated:** [October 15, 2018, 10:15am UTC](https://discuss.elastic.co/t/cant-update-disk-space-watermarks-via-api/148793 "2018-10-15T10:15:21Z")

</div>

Hello there. I'm trying to update thresholds of disk space in my ES cluster but can't do this due to error. \[admin@client1 ~\]$ curl -X PUT "10.xxx.xxx.xxx:9200/\_cluster/settings?flat\_settings=true" -H 'Content- Type: …

---

## [Bunch of errors when running curator test suite command](https://discuss.elastic.co/t/bunch-of-errors-when-running-curator-test-suite-command/103449)

<div class="topic-metadata">

**Author:** [@atgraphy](https://discuss.elastic.co/u/atgraphy)\
**Replies:** 6\
**Last updated:** [October 11, 2017, 3:27am UTC](https://discuss.elastic.co/t/bunch-of-errors-when-running-curator-test-suite-command/103449 "2017-10-11T03:27:56Z")

</div>

When I run python setup.py test, I get this output. Does anyone get the same error? ----- No handlers could be found for logger "elasticsearch.trace" test\_add\_and\_remove (test.integration.test\_alias.TestCLIAlias) ... FA…

---

## [No output when using multiline codec from stdin](https://discuss.elastic.co/t/no-output-when-using-multiline-codec-from-stdin/73547)

<div class="topic-metadata">

**Author:** [@mhooper](https://discuss.elastic.co/u/mhooper)\
**Replies:** 6\
**Last updated:** [February 3, 2017, 1:14pm UTC](https://discuss.elastic.co/t/no-output-when-using-multiline-codec-from-stdin/73547 "2017-02-03T13:14:11Z")

</div>

I have recently started using logstash and am trying to build a sandbox environment to test different parsing. I have built a test.config file using stdin and cat a data file through it to get stdout display of outcome…

---

## [\[SOLVED\] Customing document routing](https://discuss.elastic.co/t/solved-customing-document-routing/54470)

<div class="topic-metadata">

**Author:** [@axelfelix](https://discuss.elastic.co/u/axelfelix)\
**Replies:** 6\
**Last updated:** [July 1, 2016, 6:27pm UTC](https://discuss.elastic.co/t/solved-customing-document-routing/54470 "2016-07-01T18:27:19Z")

</div>

Hi all, Regarding elasticsearch blog I can read: "Routing ensures that all documents with the same routing value will locate to the same shard" Now in my configuration I have 20 shards and 4 document type. It is pos…

---

## [I'm looking for a grammar/parser for elasticsearch query\_string](https://discuss.elastic.co/t/im-looking-for-a-grammar-parser-for-elasticsearch-query-string/188283)

<div class="topic-metadata">

**Author:** [@Dave\_Hangman](https://discuss.elastic.co/u/Dave_Hangman)\
**Replies:** 0\
**Last updated:** [July 1, 2019, 10:16am UTC](https://discuss.elastic.co/t/im-looking-for-a-grammar-parser-for-elasticsearch-query-string/188283 "2019-07-01T10:16:49Z")

</div>

What I'm trying to achieve is to generate a valid elasticsearch query\_string form inputs preferably in frontend. In worst case it can be generated in the backend (nodeJS, NestJS). I'm looking for libraries which can ge…

---

## [ES 8.6.2 - puzzling "Authentication of \[elastic\] was terminated by realm \[reserved\] - failed to authenticate user \[elastic\]"?](https://discuss.elastic.co/t/es-8-6-2-puzzling-authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/335152)

<div class="topic-metadata">

**Author:** [@mrodent](https://discuss.elastic.co/u/mrodent)\
**Replies:** 3\
**Last updated:** [June 5, 2023, 8:01pm UTC](https://discuss.elastic.co/t/es-8-6-2-puzzling-authentication-of-elastic-was-terminated-by-realm-reserved-failed-to-authenticate-user-elastic/335152 "2023-06-05T20:01:41Z")

</div>

I am aware this error has come up before, but please note the version, 8.6.2. Most of the others are about v7. So far I have found the whole configuration of 8.6.2. much more of a challenge (from the security PoV) than v…

---

## [Can't load dataset for offline lab of Elasticsearch Engineer I (blogs.csv)](https://discuss.elastic.co/t/cant-load-dataset-for-offline-lab-of-elasticsearch-engineer-i-blogs-csv/205947)

<div class="topic-metadata">

**Author:** [@saif3r](https://discuss.elastic.co/u/saif3r)\
**Replies:** 3\
**Last updated:** [October 30, 2019, 9:42pm UTC](https://discuss.elastic.co/t/cant-load-dataset-for-offline-lab-of-elasticsearch-engineer-i-blogs-csv/205947 "2019-10-30T21:42:29Z")

</div>

Hello, I would like to redo the entire Elasticsearch Engineer I training. I have my cluster setup using 3 virtual machines on my PC. Cluster is up and running, so is Kibana. How can i upload all the neccesary data used …

---

## [Method to timestamp my logstash events](https://discuss.elastic.co/t/method-to-timestamp-my-logstash-events/135888)

<div class="topic-metadata">

**Author:** [@dyl](https://discuss.elastic.co/u/dyl)\
**Replies:** 8\
**Last updated:** [June 22, 2018, 6:11pm UTC](https://discuss.elastic.co/t/method-to-timestamp-my-logstash-events/135888 "2018-06-22T18:11:01Z")

</div>

Hello everybody, I have this input log : INFO;0000;000001;\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\*\* INFO;0000;000002;\* …

---

## [HTML eMail rendering issue](https://discuss.elastic.co/t/html-email-rendering-issue/120549)

<div class="topic-metadata">

**Author:** [@Karthik\_Ramachandran](https://discuss.elastic.co/u/Karthik_Ramachandran)\
**Replies:** 3\
**Last updated:** [February 21, 2018, 8:07am UTC](https://discuss.elastic.co/t/html-email-rendering-issue/120549 "2018-02-21T08:07:52Z")

</div>

I belive the html sanitization comes into effect, but not sure I'm using below output syntax to the eMail action {{#ishighuse}} \<td bgcolor="Tomato"\>{{jvminuse}} {{/ishighuse}} bgcolor setting is not set and always g…

---

## [Beat Dashboards aggregating on non-aggregatable fields](https://discuss.elastic.co/t/beat-dashboards-aggregating-on-non-aggregatable-fields/106481)

<div class="topic-metadata">

**Author:** [@chris060986](https://discuss.elastic.co/u/chris060986)\
**Replies:** 3\
**Last updated:** [November 7, 2017, 6:47am UTC](https://discuss.elastic.co/t/beat-dashboards-aggregating-on-non-aggregatable-fields/106481 "2017-11-07T06:47:44Z")

</div>

Hi, we are using elasticsearch 5.6.2 and the beat-dashboards 5.6.2. After installing the dashboards all seems to be fine, indices are created, visualizations and dashboards are successfully stored in elastic. But when …

---

## [Datetime named parameter in jdbc input](https://discuss.elastic.co/t/datetime-named-parameter-in-jdbc-input/91012)

<div class="topic-metadata">

**Author:** [@zahodi](https://discuss.elastic.co/u/zahodi)\
**Replies:** 3\
**Last updated:** [June 27, 2017, 8:44pm UTC](https://discuss.elastic.co/t/datetime-named-parameter-in-jdbc-input/91012 "2017-06-27T20:44:58Z")

</div>

How do I pass a datetime as a named parameter in logstash jdbc input? Trying to query mysql based on the current date and time.

---

## [Elasticsearch chinese stopword](https://discuss.elastic.co/t/elasticsearch-chinese-stopword/76147)

<div class="topic-metadata">

**Author:** [@Greentea](https://discuss.elastic.co/u/Greentea)\
**Replies:** 3\
**Last updated:** [February 27, 2017, 4:03pm UTC](https://discuss.elastic.co/t/elasticsearch-chinese-stopword/76147 "2017-02-27T16:03:02Z")

</div>

Hi! I am working with my stopword list. Here is what going on. I use "stopwords\_path": "stopword/chinese.txt" as my stopword list. And I find that, elasticsearch seem not can not read the chinese word in txt file. But…

---

## [\[SOLVED\] Strange grokparsefailure behavior](https://discuss.elastic.co/t/solved-strange-grokparsefailure-behavior/48402)

<div class="topic-metadata">

**Author:** [@axelfelix](https://discuss.elastic.co/u/axelfelix)\
**Replies:** 3\
**Last updated:** [April 26, 2016, 3:51pm UTC](https://discuss.elastic.co/t/solved-strange-grokparsefailure-behavior/48402 "2016-04-26T15:51:06Z")

</div>

Hi all, Just to share with you a strange grokparsefailure behavior and I try to understand why... Logstash Input: input { file { path =\> "/etc/logstash/test-2016-04-17-05.log" start\_position =\> beginni…

---

## [ES 2.0 and attachments plugin issue](https://discuss.elastic.co/t/es-2-0-and-attachments-plugin-issue/34578)

<div class="topic-metadata">

**Author:** [@twigbranch](https://discuss.elastic.co/u/twigbranch)\
**Replies:** 3\
**Last updated:** [November 14, 2015, 7:36am UTC](https://discuss.elastic.co/t/es-2-0-and-attachments-plugin-issue/34578 "2015-11-14T07:36:13Z")

</div>

It used to be that this would work: { "file" : { "properties" : { "attachment" : { "type" : "attachment", "path" : "full", "fields": { "attachment": { …

---

## [How to extract specific entries matching a pattern to a different file](https://discuss.elastic.co/t/how-to-extract-specific-entries-matching-a-pattern-to-a-different-file/24864)

<div class="topic-metadata">

**Author:** [@cruizpollino](https://discuss.elastic.co/u/cruizpollino)\
**Replies:** 3\
**Last updated:** [July 3, 2015, 2:25pm UTC](https://discuss.elastic.co/t/how-to-extract-specific-entries-matching-a-pattern-to-a-different-file/24864 "2015-07-03T14:25:45Z")

</div>

Good morning everyone, I'm starting with logstash and elasticsearch so maybe this is a silly question, if its sorry for make lost your time guys. We've set a central server as the syslogd server and rest of servers a…

---

## [I have the error 503, No Shard Available Action Exception](https://discuss.elastic.co/t/i-have-the-error-503-no-shard-available-action-exception/26781)

<div class="topic-metadata">

**Author:** [@Juan\_Diaz\_Gonzalez](https://discuss.elastic.co/u/Juan_Diaz_Gonzalez)\
**Replies:** 0\
**Last updated:** [August 4, 2015, 8:52am UTC](https://discuss.elastic.co/t/i-have-the-error-503-no-shard-available-action-exception/26781 "2015-08-04T08:52:38Z")

</div>

Hi everyone, I am having problems when I am looking for a register inside of an index and the message is the next: TransportError: TransportError(503, u'NoShardAvailableActionException\[\[new\_gompute\_history\]\[2\] null\]…

---

## [How to use a field's meta data in search results](https://discuss.elastic.co/t/how-to-use-a-fields-meta-data-in-search-results/228996)

<div class="topic-metadata">

**Author:** [@arun\_001](https://discuss.elastic.co/u/arun_001)\
**Replies:** 2\
**Last updated:** [April 22, 2020, 8:25am UTC](https://discuss.elastic.co/t/how-to-use-a-fields-meta-data-in-search-results/228996 "2020-04-22T08:25:54Z")

</div>

My requirement is to store some meta data against some fields and retrieve them as part of search results. Looks like the following is what I'm looking for but I'm not sure how use that in a single query. https://www.e…

---

## [I want to create pie chart show counter and percentage on kibana 6.3](https://discuss.elastic.co/t/i-want-to-create-pie-chart-show-counter-and-percentage-on-kibana-6-3/160319)

<div class="topic-metadata">

**Author:** [@Joe\_Forex](https://discuss.elastic.co/u/Joe_Forex)\
**Replies:** 2\
**Last updated:** [December 12, 2018, 4:22am UTC](https://discuss.elastic.co/t/i-want-to-create-pie-chart-show-counter-and-percentage-on-kibana-6-3/160319 "2018-12-12T04:22:12Z")

</div>

I want to create pie chart show counter and percentage on kibana 6.3.I can't show counter and percentage twin.

---

## [Adding replication/slave nodes to node running elastic search in production](https://discuss.elastic.co/t/adding-replication-slave-nodes-to-node-running-elastic-search-in-production/149336)

<div class="topic-metadata">

**Author:** [@Sam12](https://discuss.elastic.co/u/Sam12)\
**Replies:** 2\
**Last updated:** [October 9, 2018, 7:55pm UTC](https://discuss.elastic.co/t/adding-replication-slave-nodes-to-node-running-elastic-search-in-production/149336 "2018-10-09T19:55:07Z")

</div>

Hello Everyone, I am little new into elastic search world. I have deployed elastic search single node that includes multiple index in production on one of the systems that contains more than 1L docs. My Questions are …

---

## [Cannot support regular expression style include/exclude settings as they can only be applied to string fields](https://discuss.elastic.co/t/cannot-support-regular-expression-style-include-exclude-settings-as-they-can-only-be-applied-to-string-fields/137863)

<div class="topic-metadata">

**Author:** [@Luis\_Alejandro\_Galan](https://discuss.elastic.co/u/Luis_Alejandro_Galan)\
**Replies:** 2\
**Last updated:** [June 29, 2018, 1:29pm UTC](https://discuss.elastic.co/t/cannot-support-regular-expression-style-include-exclude-settings-as-they-can-only-be-applied-to-string-fields/137863 "2018-06-29T13:29:07Z")

</div>

Hello, I am new to ELK stack and have gone through the basic installation using the following links: On my Management/Elasticsearch/Index Management in Kibana, i saw that my filebeat-\* indexes are both in "Yellow…

---

## [ArrayIndexOutOfBoundsException while indexing](https://discuss.elastic.co/t/arrayindexoutofboundsexception-while-indexing/120550)

<div class="topic-metadata">

**Author:** [@mattweber](https://discuss.elastic.co/u/mattweber)\
**Replies:** 2\
**Last updated:** [February 20, 2018, 3:27pm UTC](https://discuss.elastic.co/t/arrayindexoutofboundsexception-while-indexing/120550 "2018-02-20T15:27:26Z")

</div>

Ran across this while indexing today. -65536 looks like it might be an overflow or something but not sure. This is the first attempt at indexing with large ngram settings (min=1, max=8) so that might be related. Any i…

---

## [Remove deprecated setting via API](https://discuss.elastic.co/t/remove-deprecated-setting-via-api/115406)

<div class="topic-metadata">

**Author:** [@Jorrit\_Salverda](https://discuss.elastic.co/u/Jorrit_Salverda)\
**Replies:** 2\
**Last updated:** [January 13, 2018, 1:40pm UTC](https://discuss.elastic.co/t/remove-deprecated-setting-via-api/115406 "2018-01-13T13:40:46Z")

</div>

I've upgrade to elasticsearch 6.1.1. When trying to update cluster settings it can't because it still has retired settings. Running curl 'localhost/\_cluster/settings?pretty' returns the following response which still ha…

---

## [Can Curator run continously?](https://discuss.elastic.co/t/can-curator-run-continously/87016)

<div class="topic-metadata">

**Author:** [@dolanmk](https://discuss.elastic.co/u/dolanmk)\
**Replies:** 2\
**Last updated:** [May 24, 2017, 5:10pm UTC](https://discuss.elastic.co/t/can-curator-run-continously/87016 "2017-05-24T17:10:12Z")

</div>

Hi, I am interested in using Curator to manage my Elasticsearch cluster. My goal is to use Curator for rolling deletion of my documents (i.e. all event older than 60 days). My question is can I run Curator once and …

---

## [Python ES and Carrot2](https://discuss.elastic.co/t/python-es-and-carrot2/17122)

<div class="topic-metadata">

**Author:** [@Pratik\_Poddar](https://discuss.elastic.co/u/Pratik_Poddar)\
**Replies:** 2\
**Last updated:** [April 23, 2014, 8:33pm UTC](https://discuss.elastic.co/t/python-es-and-carrot2/17122 "2014-04-23T20:33:26Z")

</div>

Stackoverflow link: http://stackoverflow.com/questions/23047976/python-elasticsearch-and-carrot I am using python elastic search and I need to do document clustering. I have installed carrot2 (https://github.com/c…

---

## [How to parse nested json through logstash](https://discuss.elastic.co/t/how-to-parse-nested-json-through-logstash/237290)

<div class="topic-metadata">

**Author:** [@Rahul\_rr](https://discuss.elastic.co/u/Rahul_rr)\
**Replies:** 7\
**Last updated:** [June 18, 2020, 2:55pm UTC](https://discuss.elastic.co/t/how-to-parse-nested-json-through-logstash/237290 "2020-06-18T14:55:39Z")

</div>

I'm getting the data from sqs queue as a nested json and parsing through logstash. i tried some approaches but it didn't work. Below is my sample nested json. { "service\_event": { "id": 166175, "equipment": { "id": …

---

## [Only import new or updated rows using JDBC](https://discuss.elastic.co/t/only-import-new-or-updated-rows-using-jdbc/76152)

<div class="topic-metadata">

**Author:** [@Reno](https://discuss.elastic.co/u/Reno)\
**Replies:** 1\
**Last updated:** [February 23, 2017, 6:52am UTC](https://discuss.elastic.co/t/only-import-new-or-updated-rows-using-jdbc/76152 "2017-02-23T06:52:10Z")

</div>

Right now I've got Logstash importing a miniature version of my MSSQL database, using the JDBC plugin. I've got each JDBC input scheduled to run every minute to update Elasticsearch. To update, I'm currently just re-impo…

---

## [Filebeat beta1 not working for my prospectors .yml file that was working on alpha 5](https://discuss.elastic.co/t/filebeat-beta1-not-working-for-my-prospectors-yml-file-that-was-working-on-alpha-5/61832)

<div class="topic-metadata">

**Author:** [@agonzalez](https://discuss.elastic.co/u/agonzalez)\
**Replies:** 7\
**Last updated:** [October 3, 2016, 3:48pm UTC](https://discuss.elastic.co/t/filebeat-beta1-not-working-for-my-prospectors-yml-file-that-was-working-on-alpha-5/61832 "2016-10-03T15:48:28Z")

</div>

I have a large prospector list that was working fine on 5.0-alpha5. If i upgrade filebeat to beta1 no logs are seen in kibana. I dont see any error on /var/log. If i downgrade to alpha5 logs can be seen on kibana agai…

---

## [Change mapping of field in existing index](https://discuss.elastic.co/t/change-mapping-of-field-in-existing-index/54847)

<div class="topic-metadata">

**Author:** [@Smasell](https://discuss.elastic.co/u/Smasell)\
**Replies:** 1\
**Last updated:** [July 6, 2016, 9:53pm UTC](https://discuss.elastic.co/t/change-mapping-of-field-in-existing-index/54847 "2016-07-06T21:53:27Z")

</div>

I have my device\_model field, for example like this: LENOVO IdeaTab A3000-H\[graphicsDeviceName: PowerVR SGX 544MP; graphicsDeviceVendor: Imagination Technologies; graphicsDeviceVersion: OpenGL ES 2.0 build 1.9@2204701;…

---

## [Writing to Elasticsearch from HDFS using Map/Reduce](https://discuss.elastic.co/t/writing-to-elasticsearch-from-hdfs-using-map-reduce/50896)

<div class="topic-metadata">

**Author:** [@Mahla](https://discuss.elastic.co/u/Mahla)\
**Replies:** 1\
**Last updated:** [June 1, 2016, 11:33am UTC](https://discuss.elastic.co/t/writing-to-elasticsearch-from-hdfs-using-map-reduce/50896 "2016-06-01T11:33:24Z")

</div>

I'm trying to write some files, which are stored on HDFS, to ElasticSearch by using hadoop map reduce. I have one mapper and no reducers and the files are in JSON format. When I run my code, 800 reducers starts runnin…

---

## [Backup Of Index In Elasticsearch](https://discuss.elastic.co/t/backup-of-index-in-elasticsearch/347834)

<div class="topic-metadata">

**Author:** [@Debasis\_Mallick](https://discuss.elastic.co/u/Debasis_Mallick)\
**Replies:** 4\
**Last updated:** [November 24, 2023, 3:27pm UTC](https://discuss.elastic.co/t/backup-of-index-in-elasticsearch/347834 "2023-11-24T15:27:27Z")

</div>

Hi Team, I had a requirement where Elasticsearch is running as a container. I need to take backup of the one of the index and need to restore in Elasticsearch cluster which is running on VM. There is no Kibana configure…

---

## [Create new index pattern: Reticulating splines](https://discuss.elastic.co/t/create-new-index-pattern-reticulating-splines/226779)

<div class="topic-metadata">

**Author:** [@yurig](https://discuss.elastic.co/u/yurig)\
**Replies:** 4\
**Last updated:** [May 6, 2020, 8:32pm UTC](https://discuss.elastic.co/t/create-new-index-pattern-reticulating-splines/226779 "2020-05-06T20:32:55Z")

</div>

I am running Kibana/Elastic version 6.4.2 on Windows and trying to create a new index pattern by going to Management --\> Index patterns --\> Create index pattern. The window gets stuck on 'Checking for Elasticsearch data…

---

## [Runaway memory usage](https://discuss.elastic.co/t/runaway-memory-usage/203483)

<div class="topic-metadata">

**Author:** [@JoeyLemur](https://discuss.elastic.co/u/JoeyLemur)\
**Replies:** 4\
**Last updated:** [October 14, 2019, 7:11pm UTC](https://discuss.elastic.co/t/runaway-memory-usage/203483 "2019-10-14T19:11:00Z")

</div>

I am deploying Elastic 7.4.0 in my cluster, specifying -Xms4096M -Xmx4096M for the nodes, but I continue to run into pods getting evicted for memory pressure. Examples: The node was low on resource: memory. Container e…

[Previous page](https://discuss.elastic.co/top.md?page=1268&per_page=50&period=all)

[Next page](https://discuss.elastic.co/top.md?page=1270&per_page=50&period=all)
